|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
Hiki contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the attacker bypasses the application's authentication by issuing artibrary queries as though following the "OK" link. This flaw may lead to a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Rumored / Private
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 0.6.5, 0.7.0-devel-20040626 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
Hiki
 |
0.6.3 |
0.7-devel-20040407 |
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
