Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hwfj-cvxw-8xw6

Опубликовано: 15 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password.

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password.

EPSS

Процентиль: 45%
0.00222
Низкий

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.5
nvd
почти 4 года назад

An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password.

EPSS

Процентиль: 45%
0.00222
Низкий

Дефекты

CWE-287