RE: [cobalt-users] Raq550: Serious Security Issue

["Tolentino, Elmer" <etolentino@xxxxxxxxx>]

> -----Original Message-----
> From: John D. Gorena [mailto:Support@xxxxxxxxxxxxxxxxxxx]
> Sent: Monday, March 31, 2003 8:13 AM
> To: Cobalt-Developers List; Cobalt-Users List
> Subject: [cobalt-users] Raq550: Serious Security Issue
> 
> 
> One of my virtual hosting clients informed me that he can see 
> any site Administrator login.
> 
> After he logs into his site at www.domainname.com/login, he 
> then can change the Site number in the
> URL and see another site's administrative GUI console.  With 
> full administrative privileges too.
> 
Same thing on mine.

> I tried this on two different Raq550's.  Both have all the 
> updates.  Both allow me to cross the
> access areas with no problems.  Has anyone else reported this 
> and is there a fix in the works?  Is
> there a fix now?
> 
> John
> 
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>