Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Cobalt Qube Authentication Bypass Vulnerability

A vulnerability has been reported for Cobalt Qube that may allow an attacker to bypass the authentication mechanism and obtain administrative privileges.

The vulnerability occurs because of a weak authentication mechanism with Cobalt Qube appliances. The authentication mechanism fails to properly validate the input supplied in the client cookie. Thus it is possible for an attacker to refer to a file on the filesystem as that containing the session key. This vulnerability may be exploited by remote attackers to obtain administrative privileges on the device.







 

Privacy Statement
Copyright 2008, SecurityFocus