A vulnerability has been reported in GOsa, which can be exploited by malicious users to manipulate certain data.

The vulnerability is caused due to an unspecified error within the handling of POST requests, which can be exploited to modify certain settings and object values, including the administrator password.

The vulnerability is reported in versions prior to 2.5.8.

Solution
Update to version 2.5.8.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
ftp://oss.gonicus.de/pub/gosa/Changelog

Deep Links
Links available to Secunia VIM customers