CVE-2005-1708

templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.

Date published : 2005-05-24

http://www.securityfocus.com/bid/13723

http://marc.info/?l=bugtraq&m=111695726810435&w=2