PT-2002-2456 · Newspro · Newspro

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1734

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NewsPro version 1.01

Description The issue allows remote attackers to gain unauthorized administrator access. This can be achieved by setting the authentication cookie to "logged,true".

Recommendations For NewsPro version 1.01, update the authentication mechanism to properly validate and secure cookies, preventing unauthorized access by setting the authentication cookie to "logged,true".

Fix

Related Identifiers

CVE-2002-1734

Affected Products

Newspro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1734 · Security Note
• http://securityfocus.com/bid/4672 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9007 · Note
• http://derkeiler.com/Mailing-Lists/securityfocus/vuln-dev/2002-05/0135.html · Note