PT-2022-12330
CVE-2021-45347
·
Published
2022-02-14
·
Updated
2022-02-23
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
zzcms version 8.2
Description
An issue exists that allows a malicious user to bypass authentication by modifying the
username in the cookie, enabling the use of any password.Recommendations
For zzcms version 8.2, update the software to a version that fixes the authentication bypass issue, or as a temporary workaround, consider implementing additional authentication checks to prevent unauthorized access.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾