vendor:
ActiveKB
by:
t0pP8uZz
7.5
CVSS
HIGH
Insecure Cookie Handling/Arbitrary Admin Access
N/A
CWE
Product Name: ActiveKB
Affected Version From: 1.5
Affected Version To: 1.5
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
ActiveKB <= 1.5 Insecure Cookie Handling/Arbitrary Admin Access
ActiveKB suffers from an insecure cookie, when the admin details are checked the script creates a cookie, to let the script know in future the user is already been checked and is admin. The thing is that, the cookie only contains a 'true' value. So this allows the remote attacker to craft a cookie (which the script didnt create of course) and gain access to the admin area. Pasting the below javascript code into your browser, will create a cookie then you have access to /admin/
Mitigation:
N/A
