CVE-2005-2286 Information

Description

WebEOC before 6.0.2 does not properly check user authorization which allows remote attackers to gain privileges via a direct request to a resource.

Reference

http://www.kb.cert.org/vuls/id/258834 http://www.kb.cert.org/vuls/id/JGEI-6BWLWG