Asp · Asp Project Management · CVE-2009-0280
**Name of the Vulnerable Software and Affected Versions**
Asp Project Management version 1.0
**Description**
The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the `crypt` cookie to 1, effectively allowing unauthorized access to administrative functions.
**Recommendations**
For Asp Project Management version 1.0, as a temporary workaround, consider restricting access to administrative functions until a patch is available. Avoid using the `crypt` cookie or set it to a value other than 1 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.