• info
• discussion
• exploit
• solution
• references

PHP Soap Engine Make_HTTP_Soap_Request Weak Nonce HTTP Authentication Weakness

An attacker can exploit this issue by using brute-force techniques to guess the value of the nonce.