PT-2007-2587

CVE-2007-1160

Published

2007-02-28

Updated

2018-10-16

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions webSPELL versions 4.0 and later

Description The issue allows remote attackers to bypass authentication by utilizing a ws auth cookie.

Recommendations For webSPELL version 4.0 and later, update to a version that includes a fix for this authentication bypass issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾