PT-2014-3202

Name of the Vulnerable Software and Affected Versions Bitrix Site Manager versions prior to 14.0.1 Description The issue allows remote attackers to bypass authentication via a brute force attack by guessing the BITRIX SM SALE UID cookie value, which uses sequential values. Recommendations For...