Authentication flaw

webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a wsauth cookie, a different vulnerability than CVE-2006-4782...