Microsoft Commerce Server 2002 Authentication Bypass Vulnerability

Microsoft Commerce Server 2002 Authentication Bypass Vulnerability

Microsoft Commerce Server 2002 is prone to an authentication-bypass vulnerability. This issue is due to a failure in the application to correctly authenticate users due to the possible existence of sample files.

An attacker can exploit this issue to bypass the authentication mechanism and gain access to the affected application as any pre-existing user.

Microsoft Commerce Server 2002 prior to Service Pack 2 are affected by this issue.