CVE-2013-6766

OpenVAS Administrator (and Manager) is affected by an authentication bypass (CVE-2013-6766) where processing OMP/OAP version-info requests incorrectly sets the client state to CLIENT_AUTHENTIC, allowing unauthorized OAP commands. Affected: OpenVAS Administrator 1.2.x before 1.2.2 and 1.3.x before...