CVE-2004-2736

Description

Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie.

Affected Platforms

Weakness Type

CWE-287

References

• http://secunia.com/advisories/12120
• http://www.osvdb.org/8168
• http://www.securiteam.com/windowsntfocus/5OP0K0ADGA.html
• http://www.securityfocus.com/bid/10775
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16778
• http://secunia.com/advisories/12120