1. Forum
  2. FidoNet
  3. SECURITY

  • Boa Web Server 0.94.13 / 0.94.14 Authentication Bypass

    From Security Bot@2:250/1 to All on Sat Jan 14 16:22:00 2023


    Boa Web Server 0.94.13 / 0.94.14 Authentication Bypass

    Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the
    correct security constraint on the HEAD HTTP method allowing everyone to
    bypass the Basic Authorization mechanism.

    https://packetstormsecurity.com/files/169962/boa09414-bypass.txt

    Mon, 21 Nov 2022 16:05:46 GMT
    ________________________________
    --- The information is for inforamtional purposes only.
    * Origin: Read us with http://winpoint.org JID: rs@captflint.com