PT-2004-3625 · Polar · Polar Helpdesk

Publicado 2004-12-31 · Atualizado 2017-07-29 · CVE-2004-2736

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Polar HelpDesk version 3.0

Description The issue allows remote attackers to bypass authentication. This is achieved by setting the UserId and UserType values in a cookie.

Recommendations For Polar HelpDesk version 3.0, update the software to prevent attackers from bypassing authentication by manipulating cookie values.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2004-2736

Produtos afetados

Polar Helpdesk

Referências · 7

• 🔥 https://exploit-db.com/exploits/24302 · Exploit
• 🔥 http://securiteam.com/windowsntfocus/5OP0K0ADGA.html · Exploit
• 🔥 http://securityfocus.com/bid/10775 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16778 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2736 · Nota de Segurança
• http://secunia.com/advisories/12120 · Aviso do Fabricante
• http://osvdb.org/8168 · Nota