A vulnerability has been reported in Vignette, which can be exploited by malicious users to bypass certain security restrictions.

The vulnerability is caused due to an unspecified error in Vignette Content Management (VCM), which can be exploited to gain administrative access and e.g. create, approve, and publish content or change application configurations.

The vulnerability affects Vignette Content Management versions 7.3.0.5, 7.3.1, 7.3.1.1, 7.4, and 7.5.

Solution
VCM 7.3.1 through 7.5:
Further details available to Secunia VIM customers

Provided and/or discovered by
National Australia Bank's Security Assurance Team

Changelog
Further details available to Secunia VIM customers

Original Advisory
Vignette:
http://dialog.vignette.com/hm?g=1.2jds7.bky8.rs.0.27gqh.htk8&h=1

Deep Links
Links available to Secunia VIM customers