Project

General

Profile

Bug #3498

Wake on Lan Widget no auth needed

Added by Fernando Munoz over 5 years ago. Updated about 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Web Interface
Target version:
Start date:
03/02/2014
Due date:
% Done:

0%

Estimated time:
Affected Version:
Affected Architecture:

Description

Wake on Lan Widget doesn't include "guiconfig.inc", so no auth is required when accessing it remotely, this could leak information about MAC address that has Wake on Lan enabled:

https://github.com/pfsense/pfsense/blob/master/usr/local/www/widgets/widgets/wake_on_lan.widget.php

Associated revisions

Revision b27659bd (diff)
Added by Chris Buechler about 5 years ago

add guiconfig to widgets not including it. ticket #3498

Revision ad57eacf (diff)
Added by Chris Buechler about 5 years ago

add guiconfig to widgets not including it. ticket #3498

History

#1 Updated by Chris Buechler about 5 years ago

  • Category set to Web Interface
  • Status changed from New to Resolved
  • Target version set to 2.2

fixed, thanks

Also available in: Atom PDF