CVE-2008-1134

EPSS 2.2%

OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secret, which allows remote attackers to login as an arbitrary user via a modified cookie.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/31003unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/28410 https://exchange.xforce.ibmcloud.com/vulnerabilities/39575 http://www.securityfocus.com/archive/1/486009/100/0/threaded http://www.securityfocus.com/bid/27210