Project

General

Profile

Actions
Copy link

Bug #2001

closed

URGENT : Lack of security

Added by Edwin Brasseur about 9 years ago. Updated about 8 years ago.

Status:
Closed
Priority:
Immediate
Assignee:
Edwin Brasseur
Category:
Bugs
Target version:
-
Start date:
03/30/2015
Due date:
% Done:

100%

Estimated time:

Description

By accessing GoAutoDial HTTP service on https://IP_OF_SERVER/index.php/go_carriers_ce/go_get_carrier/view/CARRIERNAME

This without any login. you have full access of the carrier config. INCLUDING LOGIN & PASSWORD on source code of the page.

It need to be fixed very quickly.

Actions
Copy link

Also available in: Atom PDF

Go to top