The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2014-01-26T01:00:00
Updated: 2024-08-06T18:01:18.922Z
Reserved: 2013-12-18T00:00:00
Link: CVE-2013-7137
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2014-01-26T01:55:09.767
Modified: 2022-04-06T18:32:12.223
Link: CVE-2013-7137
Redhat
No data.