PT-2002-2456 · Newspro · Newspro

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1734

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NewsPro version 1.01

Description The issue allows remote attackers to gain unauthorized administrator access. This can be achieved by setting the authentication cookie to "logged,true".

Recommendations For NewsPro version 1.01, update the authentication mechanism to properly validate and secure cookies, preventing unauthorized access by setting the authentication cookie to "logged,true".

Correção

Identificadores relacionados

CVE-2002-1734

Produtos afetados

Newspro

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1734 · Nota de Segurança
• http://securityfocus.com/bid/4672 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9007 · Nota
• http://derkeiler.com/Mailing-Lists/securityfocus/vuln-dev/2002-05/0135.html · Nota