CVE-2007-6006 Missing authorization in n/a
TestLink fails to enforce authorization, potentially allowing unauthorized access to functionality or data.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2007-6006?
CVE-2007-6006 is a critical missing authorization vulnerability in n/a, published on 15 Nov 2007. It can be exploited over the network.
Official description
TestLink before 1.7.1 does not enforce an unspecified authorization mechanism, which has unknown impact and attack vectors.
Weakness: CWE-287
Which versions are affected by CVE-2007-6006?
It affects 1 product.
Products include Testlink Testlink.
How do I fix CVE-2007-6006?
No fix has been published for CVE-2007-6006 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2007-6006 being exploited?
There is no known exploitation of CVE-2007-6006 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-m978-2g9r-q8xc.