CVE-2012-1256

The CVE-2012-1256 issue affects EasyVista’s single sign-on (SSO) implementation prior to 2010.1.1.89. An attacker can bypass authentication by manipulating the url_account parameter in conjunction with a valid login name in the SSPI_HEADER parameter targeting index.php. The description indicates ...