CVE-2011-5078

Published: Feb 8, 2012Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin authentication for unspecified scripts, which allows remote authenticated users to list or delete user accounts, modify passwords, or read log files via HTTP requests, aka Bug IDs 678497 and 678499.

Affected (2)

Products: Sybase: M Business Anywhere

1 product

M Business Anywhere

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Sybase M Business Anywhere	Version 6.7
Sybase M Business Anywhere	Version 7.0

Related CWEs

References (4)

http://www.sybase.com/detail?id=1095200

Source: cve@mitre.org

Vendor Advisory

http://www.verisigninc.com/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=952

Source: cve@mitre.org

http://www.sybase.com/detail?id=1095200

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.verisigninc.com/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=952

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.