CVE-2008-2338 Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin.
HighCVSS 7.5
EPSS 6.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified scripts in /admin.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| interspire activekb | <= 1.5 | No fix listed |
References
- 30265 third-party-advisory vendor-advisory
- 29226 vdb-entry
- 1020035 vdb-entry
- activekb-admin-security-bypass(42427) vdb-entry
- 5616 exploit