PT-2004-3625 · Polar · Polar Helpdesk

Published 2004-12-31 · Updated 2017-07-29 · CVE-2004-2736

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Polar HelpDesk version 3.0

Description The issue allows remote attackers to bypass authentication. This is achieved by setting the UserId and UserType values in a cookie.

Recommendations For Polar HelpDesk version 3.0, update the software to prevent attackers from bypassing authentication by manipulating cookie values.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2004-2736

Affected Products

Polar Helpdesk

References · 7

• 🔥 https://exploit-db.com/exploits/24302 · Exploit
• 🔥 http://securiteam.com/windowsntfocus/5OP0K0ADGA.html · Exploit
• 🔥 http://securityfocus.com/bid/10775 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2736 · Security Note
• http://secunia.com/advisories/12120 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16778 · Note
• http://osvdb.org/8168 · Note