templates.admin.users.user_form_processing in Blue Coat Reporter before 7.1.2 allows authenticated users to gain administrator privileges via an HTTP POST that sets volatile.user.administrator to true.
Score: 0.0
Priority: Unclassified
Score: 0.00913
Percentile:
0.74892
CVSS v2 Score: 4.6
Severity: