Sympa authenticateAndRun Auth Bypass

The vulnerability of the authenticateAndRun function in the Sympa mailing list manager is related to the lack of verification of the cookie value. Exploiting this vulnerability could allow an attacker who operates remotely to gain access to confidential data...

DEBIAN-CVE-2020-29668

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string except one from an expired cookie as the cookie value to authenticateAndRun...

UBUNTU-CVE-2020-29668

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string except one from an expired cookie as the cookie value to authenticateAndRun...

CVE-2020-29668

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string except one from an expired cookie as the cookie value to authenticateAndRun...

CVE-2020-29668: Improper Authentication

Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string except one from an expired cookie as the cookie value to authenticateAndRun...

PT-2020-5770

Name of the Vulnerable Software and Affected Versions: Sympa versions prior to 6.2.59b.2 Description: The issue is related to the authenticateAndRun function in the Sympa mailing list manager, which lacks proper cookie value validation. This allows a remote attacker to gain access to confidential...