medium5.0Public exploit code
CVE-2004-2736
Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Polar Helpdesk 3.0 - Cookie Based Authentication Bypass2004-07-21 · webapps · asp · Verified
Impact
Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Polar Software | Helpdesk | Version 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/12120
- http://www.osvdb.org/8168
- http://www.securiteam.com/windowsntfocus/5OP0K0ADGA.html
- http://www.securityfocus.com/bid/10775
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16778
- http://secunia.com/advisories/12120
- http://www.osvdb.org/8168
- http://www.securiteam.com/windowsntfocus/5OP0K0ADGA.html
- http://www.securityfocus.com/bid/10775
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16778