CVE-2016-10309

2017-03-3007:00:00

mitre

www.cve.org

9.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.1%

JSON

In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.

References

blog.iancaling.com/post/145973147383

www.securityfocus.com/bid/91263