A security bug?
Pasi Savilaakso
larskis@nietos.tokem.fi
Fri, 11 Jan 2002 08:03:35 +0200
---------------------- multipart/alternative attachment
I tested an admin array on Horde 2 and found out the following "security =
hole". if i am logged on as one of the admins and refresh the screen =
admin "button appears at the bottom of the screen. After pressing the =
logout button in th right upper corner admin button remains at the =
program bar at the bottom. Now i can login with another user (who is not =
an admin) and still enter the admin part of the horde and change the =
values. I have not made any special changes to the files.
I found out this problem using IE6.
Lars
---------------------- multipart/alternative attachment--