Unscored CVE-2014-10026 EUVD-2014-1098GHSA-rgmw-wjj6-7w2g

index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive informat…

Published Jan 13, 2015 · Updated Sep 16, 2024 · Assigned by mitre

Description

index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.

References

20141109 IL and CSRF vulnerabilities in D-Link DAP-1360 mailing-list
http://websecurity.com.ua/7179/