Conga luci Security Restriction Bypass Vulnerability (CVE-2014-3521)

Conga luci Security Restriction Bypass Vulnerability (CVE-2014-3521)

Release date:
Updated on:

Affected Systems:
Sourceware conga
Description:
Bugtraq id: 69820
CVE (CAN) ID: CVE-2014-3521

Conga is a remote workstation management system and luci is its web Front-end.

Conga has the permission restriction vulnerability for components in URLs related to luci website extensions. authenticated remote attackers can exploit this vulnerability to gain elevated permissions.

<* Source: Radek Steiger
*>

Suggestion:
Vendor patch:

Sourceware
----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.sourceware.org/

Reference: http://dl.packetstormsecurity.net/1409-advisories/RHSA-2014-1194-01.txt

This article permanently updates the link address: