Secunia

Information Risk Management Plc. has reported a vulnerability in UltraApps Issue Manager, which can be exploited by malicious users to gain escalated privileges.

The vulnerability is caused due to an error in the authentication process. This can be exploited to gain administrative privileges by modifying the "p_User_user_id", "User_user_id", and "User_pass" parameters.

The vulnerability has been reported in version 2.1. Other versions may also be affected.

Solution
The vulnerability has reportedly been fixed in a patch available from the vendor.

Provided and/or discovered by
Rodrigo Marcos and Andy Davis, Information Risk Management Plc.

Changelog
Further details available in Customer Area

Original Advisory
http://www.irmplc.com/advisory013.htm

Deep Links
Links available in Customer Area