Bug #10902: Possible security hole via external modification of session vars
| From: | luci at conexim dot com dot au | Date: | Wed, 16 May 2001 14:17:14 +0000 |
| Subject: | Bug #10902: Possible security hole via external modification of session vars | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-55485@lists.php.net to get a copy of this message | ||
From: luci@conexim.com.au
Operating system: Linux
PHP version: 4.0.5
PHP Bug Type: *Session related
Bug description: Possible security hole via external modification of session vars
This is kind of similar to the old file upload problem, where you could set variables in a POST.
In some cases (depends on the way the code is written), if a site stores login status (eg. user
name, etc) in session variables after an authorisation check, it is possible to pass values as the
same-named session vars, and therefore actually bypass the authorisation step getting access to
restricted areas.
--
Edit Bug report at: http://bugs.php.net/?id=10902&edit=1