CVE-2005-2187

McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the (1) fullAccess or (2) fullAccessRight parameter in reports-column-center.jsp, or (3) fullAccess parameter to SystemEvent.jsp.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2005-07-11

Last modified

2024-08-07

Affected products

• Intrushield Security Management System (Mcafee)

References

• http://marc.info/?l=bugtraq&m=112066594312876&w=2
• http://marc.info/?l=bugtraq&m=112076813804503&w=2
• http://secunia.com/advisories/15961
• http://securitytracker.com/id?1014422