CVE-2011-5078

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin authentication for…

published February 8, 2012

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP requests, aka Bug IDs 678497 and 678499.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01025 · 63.0th percentile
Published
2012-02-08T21:00Z
EPSS history
Timeline
  • 08 FEB 21:00Z
    The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin authentication for…
    cvelistv5