Microsoft Commerce Server authentication bypass
Published:		18.03.2006
Source:		BUGTRAQ
SecurityVulns ID:		5907
Type:		remote
Level:		5/10
Description:		It's possible to login with known username without password. Fixed with Service Pack 2.

Affected:

MICROSOFT : Commerce Server 2002

Original document

Dimitri, Microsoft Commerce Server 2002: Logon as known user with a false password (18.03.2006)

Discuss:

Read or add your comments to this news (0 comments)