ZoneMinder Forums

I've managed to find a security hole that will give you admin access in zoneminder without a need for a password. I've emailed the zoneminder user and gave him the details, and hope the fix gets out in the next release. I'm hessitant to give any details publicly till a patch is made to fix the hole. I'm posting here in case there is soneone else I should email. I couldn't find the author's email address on the website.

Reza

Thank you reza,
I'll email Phil and make sure he gets the info. I'll PM you with an email address to send the information. the next release is scheduled to come out in a day or two.
Cordel

Info Forwarded
Thankyou,
Cordel

This problem has now been addressed.

Thanks for letting me kow.

Phil