Authentication flaw

2021-11-1909:15:00

PRIOn knowledge base

www.prio-n.com

9.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.9%

JSON

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.

CPENameOperatorVersion
gcb_doctorle20210708

CPE	Name	Operator	Version
	gcb_doctor	le	20210708

References

www.twcert.org.tw/tw/cp-132-5313-45bde-1.html