CVE-2011-3645

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via 1 a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or 2 a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of ...

PT-2011-4556

Name of the Vulnerable Software and Affected Versions Newgen OmniDocs affected versions not specified Description The issue allows remote attackers to bypass intended access restrictions. This can be achieved through modifying the FolderRights parameter to the "doccab/doclist.jsp" endpoint, leadi...

CVE-2011-3645: Undefined Security Weakness

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via 1 a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or 2 a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of ...