Monday, August 9, 2010

DT Centrepiece : HTB22522 - Application Logic Error in DT Centrepiece vulnerability

Users of DT Centrepiece please be advised of a HTB22522 - Application Logic Error in DT Centrepiece vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com
HTB22522: HTB22522 - Application Logic Error in DT Centrepiece
DT Centrepiece
Vulnerability Details:

The user can activate an arbitrary account.



The system account is activated, has a predictable URL. This allows the user to activate any account without receiving the activation email.
Read more at www.criticalwatch.com
 

No comments:

Post a Comment