high7.5Public exploit code
CVE-2009-2231
MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account record in a MIDAS cookie.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MIDAS 1.43 - (Authentication Bypass) Insecure Cookie Handling2009-06-22 · webapps · cgi · Verified
Impact
MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account record in a MIDAS cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mid.As | Midas | Version 1.43 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/8987
- http://www.vupen.com/english/advisories/2009/1646
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51281
- http://www.exploit-db.com/exploits/8987
- http://www.vupen.com/english/advisories/2009/1646
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51281