The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided there is an active user session.
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Link | Tags |
|---|---|
| https://cert.pl/en/posts/2024/01/CVE-2023-49253/ | third party advisory |
| https://cert.pl/posts/2024/01/CVE-2023-49253/ | third party advisory |