Description
The web module in Neteyes Nexusway allows remote attackers to bypass authentication and gain administrator privileges by setting the cyclone500_auth cookie.
References
- 20050510 [Scan Associates Advisory] Neteyes Nexusway multiple vulnerability mailing-list
- 15150 third-party-advisory
- 20050511 [Scan Associates Advisory] Neteyes Nexusway multiple vulnerability mailing-list
- 16446 vdb-entry
- nexusway-configuration-modification(20554) vdb-entry