Unscored CVE-2004-1605 EUVD-2004-1599GHSA-574g-c88f-3c4p

SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertyp…

Published Feb 20, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.

References

12883 third-party-advisory
20041018 Multiple vulnerabilities in Sage Saleslogix mailing-list
1011769 vdb-entry
saleslogix-cookie-admin-access(17749) vdb-entry
11450 vdb-entry
20041018 Multiple vulnerabilities in Sage Saleslogix mailing-list
10942 vdb-entry