Authentication Bypass

2022-12-2305:49:54

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

session handling

databasehandler

memcachedhandler

redishandler

attacker access pages

EPSS

0.002

Percentile

59.8%

JSON

codeigniter4/framework is vulnerable to authentication bypass. The vulnerability exists due to the improper session handling in the library when the session handler is set to DatabaseHandler, MemcachedHandler, or RedisHandler, allowing an attacker to access pages that require another session cookie.