SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html | |
http://marc.info/?l=bugtraq&m=109811852218478&w=2 | |
http://secunia.com/advisories/12883 | Exploit Patch Vendor Advisory |
http://securitytracker.com/id?1011769 | |
http://www.osvdb.org/10942 | |
http://www.securityfocus.com/bid/11450 | Exploit Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/17749 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2004-10-14 04:00
Updated : 2017-07-11 01:31
NVD link : CVE-2004-1605
Mitre link : CVE-2004-1605
CVE.ORG link : CVE-2004-1605
JSON object : View
Products Affected
best_software
- saleslogix
saleslogix_corporation
- saleslogix
CWE