PT-2012-3372
CVE-2012-1602
·
تاريخ النشر
2012-10-01
·
تاريخ التحديث
2012-10-02
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
NextBBS version 0.6
Description
The issue allows remote attackers to bypass authentication and gain administrator access. This is achieved by setting the
userkey cookie to 1, effectively allowing unauthorized access to administrative functions.Recommendations
For NextBBS version 0.6, update the user authentication mechanism to properly validate the
userkey cookie and prevent unauthorized access. As a temporary workaround, consider restricting access to administrative functions until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾