[Azsmrc-bugs] [ azsmrc-Bugs-1587731 ] Client Security Bug

[SourceForge.net <no...@so...>]

Bugs item #1587731, was opened at 2006-10-31 19:34
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=826439&aid=1587731&group_id=163110

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Splattered (linuxbum)
Assigned to: Nobody/Anonymous (nobody)
Summary: Client Security Bug

Initial Comment:
Just downloaded AzSMRC today and loving it. However 
in my fiddling with it I found a bug that allows you 
to change account details etc. from a normal account.

Here's the steps to replicate the issue.

1. Open AzSMRC client and connect to your server as 
the admin.

2. Open user manager and create a new account with 
normal privileges only.

3. Leave the user manager window open and hit the 
disconnect button.

4. Press the connect button and this time log in with 
the new account you just created.

If you followed that correctly you will be able to 
open accounts and edit, create, delete etc. from a 
normal account.

Cheers :)

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=826439&aid=1587731&group_id=163110