NetSight
critical10.0

CVE-2005-2286

WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource.

Impact

WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource.

Affected products

VendorProductAffected versions
Esi ProductsWebeoc
through 6.0.1

References