CVE-2016-15002

A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely...

CVE-2016-15002

MONyog Ultimate 6.63 is affected by CVE-2016-15002 due to a flaw in the Cookie Handler component. Manipulating the HasServerEdit/IsAdmin parameters allows privilege escalation and can be exploited remotely. The available documents do not specify a patch or version to remediate this flaw.