Authentication flaw

2015-01-1311:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.9%

JSON

index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.

CPENameOperatorVersion
dap-1360_firmwarele2.5.4

CPE	Name	Operator	Version
	dap-1360_firmware	le	2.5.4

References

seclists.org/fulldisclosure/2014/Nov/19

websecurity.com.ua/7179/