CVE		CVE-2007-2017
Статус		Candidate
Описание		siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request.
Важность		High
CVSS score		7
CVSS vector		(AV:R/AC:L/Au:NR/C:P/I:P/A:P/B:N)
Phase		Assigned (12.04.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-2017
References		BID : 23409
		CONFIRM : http://www.alstrasoft.com/videoshare_fix.zip
		FRSIRT : ADV-2007-1331
		MISC : http://pridels.blogspot.com/2007/03/alstrasoft-vid...
		SECUNIA : 24836
		VIM : 20070710 Vendor ACK: CVE-2007-2017 (AlstraSoft useredit.php auth bypass)
		XF : alstrasoft-vse-useredit-insecure-permissions(33548)
SecurityVulns:		Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl )