Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 improperly implements the Role Based Access Control feature, which might allow remote attackers to modify an accounts role assignments via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Radia_client_automation | Accelerite | 7.9 (including) | 7.9 (including) |
| Radia_client_automation | Accelerite | 8.1 (including) | 8.1 (including) |
| Radia_client_automation | Accelerite | 9.0 (including) | 9.0 (including) |
| Radia_client_automation | Accelerite | 9.1 (including) | 9.1 (including) |
References
- http://www.securitytracker.com/id/1033862
- https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features
- http://www.securitytracker.com/id/1033862
- https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features