PT-2009-4122 · Techno Dreams · T-Dreams Job Career Package
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Techno Dreams Job Career Package version 3.0
Description:
The issue allows remote attackers to bypass authentication and obtain administrative access. This is achieved by setting the
JobCareerAdmin cookie to Login, effectively granting unauthorized access to administrative functions.Recommendations:
For Techno Dreams Job Career Package version 3.0, consider disabling the use of the
JobCareerAdmin cookie until a patch is available to prevent unauthorized administrative access.Exploit
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
T-Dreams Job Career Package