Description
SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.sql-ledger.org/cgi-bin/nav.pl?page=news.html&title=What%27s%20New ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28671 ↗
- http://www.securityfocus.com/bid/19758 ↗
- http://secunia.com/advisories/21689 ↗
- http://www.securityfocus.com/archive/1/444741/100/0/threaded ↗
- http://www.securityfocus.com/archive/1/445512 ↗
- http://securityreason.com/securityalert/1472 ↗