PT-2009-2232

CVE-2008-6763

·

تاريخ النشر

2009-04-28

·

تاريخ التحديث

2017-09-29

الوصف من

CVSS 2.0
7.5
عالية
المقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Silentum LoginSys version 1.0.0
Description: The issue allows remote attackers to bypass authentication and gain access to an arbitrary account. This is achieved by setting the logged in cookie to the username of the target account.
Recommendations: For Silentum LoginSys version 1.0.0, consider implementing proper authentication mechanisms to prevent unauthorized access, such as validating user sessions and cookies to ensure they cannot be tampered with or set arbitrarily. As a temporary workaround, restrict access to sensitive areas of the application until a proper fix is implemented.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾