Project

General

Profile

Actions
Copy link

Bug #2001

closed

URGENT : Lack of security

Added by Edwin Brasseur about 10 years ago. Updated about 9 years ago.

Status:
Closed
Priority:
Immediate
Assignee:
Edwin Brasseur
Category:
Bugs
Target version:
-
Start date:
03/30/2015
Due date:
% Done:

100%

Estimated time:

Description

By accessing GoAutoDial HTTP service on https://IP_OF_SERVER/index.php/go_carriers_ce/go_get_carrier/view/CARRIERNAME

This without any login. you have full access of the carrier config. INCLUDING LOGIN & PASSWORD on source code of the page.

It need to be fixed very quickly.

Actions
Copy link
 #1

Updated by Chris Lomuntad about 10 years ago

Hi Edwin,

Thank you for reporting this bug. We will inform you once we're done updating our GIThub repo.

Cheers,
Chris

Actions
Copy link
 #2

Updated by suman das almost 10 years ago

Its still there.. Please fix it ASAP.

Actions
Copy link
 #3

Updated by Levy Ryan Nolasco about 9 years ago

  • Status changed from New to Closed
  • Assignee changed from Demian Biscocho to Edwin Brasseur
  • % Done changed from 0 to 100

Hi,

This issue has been resolved. Please update using the latest GIThub repo.

Actions
Copy link

Also available in: Atom PDF

Go to top