CVE-2009-0460 - Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie

Back Back to CVE browser

HIGH

Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie

Published Feb 6, 2009

7.5

HIGH

CVSS 2.0

EPSS 2.83%

Description

Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (4)

http://osvdb.org/51734
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/33777
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/33577
vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/7951
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/51734		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/33777		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/33577		vdb-entryx_refsource_BIDExploit
https://www.exploit-db.com/exploits/7951		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 6, 2009

Updated Aug 7, 2024

Reserved Feb 5, 2009

Link CVE-2009-0460

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-0460

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-0460