CVE:CVE-2007-2849
CNNVD:CNNVD-200705-483
KnowledgeTree Document Management(又称KnowledgeTree Open Source) STABLE 没有要求非注册用户提供密码。当用户登录到Active目录时，远程攻击者可以在不进行设置的授权检查下登录到KTDMS。
solution:Upgrade knowledgetree_document_management knowledgetree_document_management to a higher version than 3.3.3,and avoid the version 3.3.3