Re: [cobalt-users] Raq550: Serious Security Issue

["John D. Gorena" <Support@xxxxxxxxxxxxxxxxxxx>]

"John D. Gorena" wrote:
> 
> One of my virtual hosting clients informed me that he can see any site Administrator login.
> 
> After he logs into his site at www.domainname.com/login, he then can change the Site number in the
> URL and see another site's administrative GUI console.  With full administrative privileges too.
> 
> I tried this on two different Raq550's.  Both have all the updates.  Both allow me to cross the
> access areas with no problems.  Has anyone else reported this and is there a fix in the works?  Is
> there a fix now?
> 
> John
> 


In additions to the above... They have viewing rights but can't create a new user.

John