JVNDB-2010-001204

Accela BizSearch Access Control Bypass Vulnerability

The local file seraching function in IntelligentSearch and Accela
BizSearch is prone to an access control bypass vulnerability.

Base Metrics: 5.0 (Medium) [IPA Score]

• Access Vector: Network
• Access Complexity: Low
• Authentication: None
• Confidentiality Impact: Partial
• Integrity Impact: None
• Availability Impact: None

Accela Technology

• Accela BizSearch
• eAccela BizSearch

FUJITSU

• IntelligentSearch

Users without permission can access restricted files on the
local Windows machine via the BizSearch search results.

Please refer to the 'Vendor Information' section for the official
countermeasure and take appropriate action.

Accela Technology

• Accela Technology Corporation : Top Page (Japanese)

FUJITSU

• FUJITSU Security Information : bizsearch201001 (Japanese)

1. Information Exposure(CWE-200) [IPA Evaluation]

[2010/04/09]
  Web page published