CVE-2005-4453 - Ultraapps Issue Manager Privilege Escalation Vulnerability

Publication

2005-12-21

Last modification

2018-10-19

Summary

UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field.

Risk level (CVSS AV:N/AC:L/Au:S/C:C/I:C/A:C)

High

9.0

Access Vector

  • Network
  • Adjacent Network
  • Local

Access Complexity

  • Low
  • Medium
  • High

Authentication

  • None
  • Single
  • Multiple

Confident. Impact

  • Complete
  • Partial
  • None

Integrity Impact

  • Complete
  • Partial
  • None

Affected Products

Vendor Product Versions
Ultraapps Ultraapps Issue Manager  2.1