Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Fixed
Priority: Major
Fix Version/s: 1.3 M1
Affects Version/s: 1.2 RC2
Component/s: {Unused} Authentication and Rights Management
Labels:
None

Similar issues:

Description

The validation cookie can be used to bind a cookie to an IP. Stealing the username and password cookies can bypass the IP bind if the validation cookie is assigned a value of "false" or is completely deleted.

Attachments

Activity

People

Assignee:: Sergiu Dumitriu

Reporter:: Sergiu Dumitriu

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 28/Dec/07 13:23

Updated:: 28/Dec/07 16:07

Resolved:: 28/Dec/07 15:44