PT-2008-5963 · Tlnews · Tlnews

X0R · Publicado 2008-10-27 · Atualizado 2017-09-29 · CVE-2008-4752

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TlNews version 2.2

Description The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the tlNews login cookie to admin.

Recommendations For TlNews version 2.2, consider disabling the use of the tlNews login cookie until a patch is available to prevent unauthorized administrative access.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-4752

Produtos afetados

Tlnews

Referências · 6

• 🔥 https://exploit-db.com/exploits/6836 · Exploit
• http://secunia.com/advisories/32405 · Aviso do Fabricante
• http://securityfocus.com/bid/31919 · Nota
• http://securityreason.com/securityalert/4511 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4752 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46116 · Nota