Описание
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
Ссылки
- ExploitVendor Advisory
- Vendor Advisory
- Exploit
- ExploitVendor Advisory
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:427bb:fourtwosevenbb:2.2:*:*:*:*:*:*:*
cpe:2.3:a:427bb:fourtwosevenbb:2.2.1:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.12712
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
EPSS
Процентиль: 94%
0.12712
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other