Secunia

t0pP8uZz has reported a security issue in Interspire ActiveKB, which can be exploited by malicious people to bypass certain security restrictions.

The problem is that the application allows access to the admin interface by checking if a certain cookie exists. This can be exploited to gain administrative access to the application via an "auth" cookie with the value set to "true".

The security issue is reported in version 1.5. Other versions may also be affected.

Solution
The vendor recommends upgrading to version 2.0 or later.

Provided and/or discovered by
t0pP8uZz

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/5616

Deep Links
Links available in Customer Area