Project

General

Profile

Bug #3498

Wake on Lan Widget no auth needed

Added by Fernando Munoz about 7 years ago. Updated almost 7 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Web Interface
Target version:
2.2
Start date:
03/02/2014
Due date:
% Done:

0%

Estimated time:
Affected Version:
Affected Architecture:
Release Notes:
Default

Description

Wake on Lan Widget doesn't include "guiconfig.inc", so no auth is required when accessing it remotely, this could leak information about MAC address that has Wake on Lan enabled:

https://github.com/pfsense/pfsense/blob/master/usr/local/www/widgets/widgets/wake_on_lan.widget.php

Associated revisions

Revision b27659bd (diff)
Added by Chris Buechler almost 7 years ago

add guiconfig to widgets not including it. ticket #3498

Revision ad57eacf (diff)
Added by Chris Buechler almost 7 years ago

add guiconfig to widgets not including it. ticket #3498

History

#1 Updated by Chris Buechler almost 7 years ago

  • Category set to Web Interface
  • Status changed from New to Resolved
  • Target version set to 2.2

fixed, thanks

Also available in: Atom PDF