S 2 1 S E C Advisory 017 – The Vignette Content Management and Application Portal software is vulnerable to a remote attacker accessing the SQL database without authentication by modifying a cookie. Affected versions: StoryServer 4 and 5 and Vignette V/5.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31162/S21SEC-017-en.txt
Source: https://packetstormsecurity.com/files/31162/S21SEC-017-en.txt.html