Authentication flaw

2009-05-1120:30:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.7%

JSON

Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the COOKIE_LAST_ADMIN_USER and COOKIE_LAST_ADMIN_LANG cookies. NOTE: a third party reports that the vendor disputes the existence of this issue

CPENameOperatorVersion
tribiq_cmseq5.0.9a beta

CPE	Name	Operator	Version
	tribiq_cms	eq	5.0.9a beta

References

www.securityfocus.com/bid/32001

exchange.xforce.ibmcloud.com/vulnerabilities/46237

www.exploit-db.com/exploits/6886