Advantech WebAccess Authentication Bypass
High Nessus Plugin ID 96875
Synopsis
The remote host is running a web application that is affected by an authentication bypass vulnerability.
Description
The Advantech WebAccess web server running on the remote host is affected by an authentication bypass vulnerability in the WaExlViewer component due to a failure to properly manage authentication. An unauthenticated, remote attacker can exploit this, via a POST request with specially crafted parameters, to bypass intended restrictions, allowing the attacker to access restricted pages, upload template files, and delete existing templates.
Solution
Contact the vendor for a solution.