CVE-2007-1160: Critical severity webSPELL Webspell vulnerability

Published Feb 28, 2007

Updated

webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a wsauth cookie, a different vulnerability than CVE-2006-4782.

Affected Software

1 affected component

webSPELL Webspell=4.0

Event History

Feb 28, 2007

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1160?

CVE-2007-1160 is classified as a medium to high severity vulnerability due to its potential to allow remote attackers to bypass authentication.

How do I fix CVE-2007-1160?

To fix CVE-2007-1160, you should update to the latest version of webSPELL that addresses this authentication bypass issue.

What versions of webSPELL are affected by CVE-2007-1160?

CVE-2007-1160 affects webSPELL version 4.0 and possibly later versions if they have not implemented security patches.

Who can exploit CVE-2007-1160?

CVE-2007-1160 can be exploited by remote attackers who can manipulate the ws_auth cookie to gain unauthorized access.

What is the primary impact of CVE-2007-1160?

The primary impact of CVE-2007-1160 is the unauthorized bypass of authentication mechanisms, potentially allowing attackers to gain administrative access.