Vulnerability in Notify Technology Notifylink

CVE-2005-0811

The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.

EPSS: 0.007 (47.8th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (vdb-entry, x_refsource_BID)