CVE-2010-0550

admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2010-02-04

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Geo++ Gncaster (Geopp)

References

• http://osvdb.org/62013
• http://secunia.com/advisories/38323
• http://www.redteam-pentesting.de/en/advisories/rt-sa-2010-003/-geo-r-gncaster-faulty-implementation-of-http-digest-auth…
• http://www.securityfocus.com/archive/1/509199/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55976