CVE-2013-7137

State: Published
Severity: Not scored
Published: Jan 26, 2014
Updated: Aug 6, 2024
Reserved: Dec 18, 2013

Description

The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

30916exploit
https://github.com/joshf/Burden/commit/edaa1bb8f73d6f3c8b2e78b67f1b40e02fccd0c1
https://github.com/joshf/Burden/issues/2
20140108 Improper Authentication in Burdenmailing-list
https://github.com/joshf/Burden/releases/tag/1.8.1
https://www.htbridge.com/advisory/HTB23192

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.