CVE-2004-2736 – Polar Helpdesk 3.0 - Cookie Based Authentication Bypass

https://notcve.org/view.php?id=CVE-2004-2736

Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie. • https://www.exploit-db.com/exploits/24302 http://secunia.com/advisories/12120 http://www.osvdb.org/8168 http://www.securiteam.com/windowsntfocus/5OP0K0ADGA.html http://www.securityfocus.com/bid/10775 https://exchange.xforce.ibmcloud.com/vulnerabilities/16778 • CWE-287: Improper Authentication •