Test ID:	1.3.6.1.4.1.25623.1.0.12059
Category:	CGI abuses
Title:	SandSurfer User Authentication Vulnerability
Summary:	NOSUMMARY
Description:	Description: The remote host is running SandSurfer, a web-based time keeping application. A vulnerability has been disclosed in all versions of this software, up to version 1.6.5 (included) which may allow an attacker to access the application without authenticating. Solution : Upgrade to SandSurfer 1.7.0 Risk factor : Medium
Cross-Ref:	BugTraq ID: 9647 Common Vulnerability Exposure (CVE) ID: CVE-2004-2087 http://www.securityfocus.com/bid/9647 http://www.osvdb.org/3922 http://securitytracker.com/id?1009110 http://secunia.com/advisories/10829 XForce ISS Database: sandsurfer-gain-access(15193) https://exchange.xforce.ibmcloud.com/vulnerabilities/15193
Copyright	This script is Copyright (C) 2004 Tenable Network Security

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.