ID:1416 - Exploit for Authentication bypass issues in 427BB - CVE-2006-0153

 
Main Vulnerability Database Exploits ID:1416 - Exploit for Authentication bypass issues in 427BB - CVE-2006-0153

ID:1416 - Exploit for Authentication bypass issues in 427BB - CVE-2006-0153

Published: March 18, 2020


Vulnerability identifier: #VU12710
Vulnerability risk: Low
CVE-ID: CVE-2006-0153
CWE-ID: CWE-592
Exploitation vector: Remote access
Vulnerable software:
427BB

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The weakness exists due to verifying authentication credentials based on the username, authenticated, and usertype cookies. A remote attacker can bypass authentication by using a valid username and usertype and setting the authenticated cookie.


Remediation

Install update from vendor's website.