Quick Summary:
************************************************** **********************
Product : WebArtFactory CMS.
Version : Several in-production old system versions.
Vendor : WebArtFactory - http://www.webartfactory.com
Class : Remote
Criticality : High
Operating System(s) : N/A.

Synopsis
************************************************** **********************
From=20the WebArtFactory webpage:
"Somos una empresa de desarrollo de p=E1ginas web y multimedia,=20
formada por un grupo de j=F3venes venezolanos, quienes ponemos=20
a su disposici=F3n el m=E1s alto nivel de profesionalismo y creatividad=20
prestos a lograr el =E9xito de su compa=F1=EDa y/o producto, mediante la=20
utilizaci=F3n de las herramientas tecnol=F3gicas m=E1s actualizadas."

WebArtFactory CMS is a very popular Content Management System
among high profile venezuelan web sites:=20
http://www.webartfactory.com/ns/portafolio.asp


Notice
************************************************** **********************
The very popular WebArtFactory CMS suffers from a vulnerability=20
in the authentication mechanism for its management subsystem.
Due to the very high profile websites that use this CMS, Scientech=20
de Venezuela has decided to release this advisory along with=20
some urgent recommendations. Consequently, no specific details
about this vulnerability will be made public.


Vendor Status
************************************************** **********************
Scientech de Venezuela has contacted WebArtFactory, who has acknowledge=20
the problem and is working to patch old versions of the software.


Basic Explanation
************************************************** **********************
Incorrect handling of authentication credentials in the management
subsystem allows for unauthorized access to all management webpages.=20
During routine tests, Scientech de Venezuela has determined that is=20
possible to gain total management control in a hostile manner of a site=20
using only information publicly available. It is recommended that =93work=
=20
around=94 measures be taken immediately while waiting for vendor patches.


Proof Of Concept Status
************************************************** **********************
No proof of Concept will be released until patch is available from vendor.


Work Around
************************************************** **********************
Remove all CMS' management webpages. You will have to edit your site
offline and upload new versions.

Alternatively, enforce additional authentication mechanisms to your
management webpages (digital certificates, webserver based authentication
mechanisms, etc).

Corrective Measures
************************************************** **********************
Correct authentication credentials checking in all management
webpages.


Credits
************************************************** **********************
This vulnerability was discovered by Jose Torres and Ruben Recabarren
at Scientech's Security Research Laboratory.


Disclaimer
----------------------------------------------------------------------
This advisory was released by Scientech de Venezuela as a matter
of notification to help administrators protect their networks against
the described vulnerability. Exploit source code is no longer released
in our advisories but can be obtained under contract. Contact our sales=20
department at info@scientechsecurity.com for further information on how=20
to obtain proof of concept code.

----------------------------------------------------------------------
Scientech de Venezuela. http://www.scientechsecurity.com