Description
INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookie_admin_authenticated cookie value to 1.
References
- 20010307 INDEXU Authentication By-Pass mailing-list
- indexu-gain-access(6202) vdb-entry