OneOrZero Action & Information Management System (AIMS) 2.7.0 allows remote attackers to bypass authentication and obtain administrator privileges via a crafted oozimsrememberme cookie.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/800227 | US Government Resource |
http://en.securitylab.ru/lab/PT-2011-20 | |
http://www.securityfocus.com/bid/50107 |
Configurations
Information
Published : 2011-11-01 12:55
Updated : 2012-01-26 20:03
NVD link : CVE-2011-4214
Mitre link : CVE-2011-4214
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
oneorzero
- aims