A vulnerability has been identified in Xaraya, which could be exploited by attackers to bypass security checks. This issue is caused by an unspecified error in the Roles module that does not properly validate user permissions, which could be exploited to potentially obtain elevated privileges. No further details have been disclosed.

Affected Products

Xaraya version 1.1.2 and prior

Solution

Upgrade to Xaraya version 1.1.3 :
http://sourceforge.net/projects/xaraya/

References

http://www.vupen.com/english/advisories/2007/1522
http://sourceforge.net/project/shownotes.php?release_id=503035

Credits

Vulnerability reported by the vendor

Changelog

2007-04-24 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.