| 제목 | emlog Blog Site 2.3.4 Incorrect Authorization |
|---|
| 설명 | emlog pro version 2.3.4 has session(AuthCookie) persistence and any user login vulnerability
emlog relies on the AuthCookie field in the cookie to determine whether a user is logged in, but the value is fixed for each user and the same cookie value is used for each login. In addition, in the process of generating AuthCookie, the only unknown variable, Auth_Key, has a default value, which is written in the configuration file. If this value is known, any user login vulnerability can be realized.
https://github.com/ssteveez/emlog/blob/main/emlog%20pro%20version%202.3.4%20has%20session(AuthCookie)%20persistence%20and%20any%20user%20login%20vulnerability.md |
|---|
| 원천 | ⚠️ https://github.com/ssteveez/emlog/blob/main/emlog%20pro%20version%202.3.4%20has%20session(AuthCookie)%20persistence%20and%20any%20user%20login%20vulnerability.md |
|---|
| 사용자 | bydsteve (UID 41102) |
|---|
| 제출 | 2024. 05. 09. AM 10:11 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 05. 17. AM 07:45 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 264741 [Emlog Pro 2.3.4 Cookie AuthCookie 약한 인증] |
|---|
| 포인트들 | 20 |
|---|