shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control (DTC) before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edssh_account parameter in a deletesshaccount Delete action.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-03-07 21:00
Updated : 2017-08-17 01:33
NVD link : CVE-2011-0437
Mitre link : CVE-2011-0437
JSON object : View
Products Affected
gplhost
- domain_technologie_control
CWE
CWE-264
Permissions, Privileges, and Access Controls
