Описание
Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| sympa | fixed | 6.2.58~dfsg-2 | package |
Примечания
https://github.com/sympa-community/sympa/issues/1041
https://github.com/sympa-community/sympa/pull/1044
EPSS
Связанные уязвимости
Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun.
Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun.
Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun.
Уязвимость функции authenticateAndRun менеджера электронных списков рассылки Sympa, связанная с недостатком механизма аутентификации, позволяющая нарушителю получить доступ к конфиденциальным данным
EPSS