KSA2006-001

English page

Kahua Release

kahua-web Release

Security Advisory

Event Log

Documentation

For developers

Site info

Related Site

Kahua Security Advisory 2006-001

Discription

Login session are involuntarily shared among several application which refer to different user database.

Impact

In case of using following version and operating several applications(workers) referring to different user database under the same supervisor, you are affected.

  • 0.6 or earlier released verison
  • earlier than 2006-09-26 CVS version

In case of operateing several applications(workers) under different supervisor or in case of operateing single application(worker), you are not affected.

Revisions

  • 2006-09-26 CVS version
  • 0.7 released version

Solution

Upgrade Kahua 0.7 or later. Use (kahua-current-user) to check login status.

Evasion

If you avoid upgrading Kahua, you should operate applications under different supervisor.

Change log

  • 2006-09-29 Released

Copyright (c) 2003-2007 Kahua Project Contact | About Us