Bug #10902 Updated: Possible security hole via external modification of session vars
| From: | luci at conexim dot com dot au | Date: | Wed, 16 May 2001 14:19:23 +0000 |
| Subject: | Bug #10902 Updated: Possible security hole via external modification of session vars | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-55486@lists.php.net to get a copy of this message | ||
ID: 10902
User Update by: luci@conexim.com.au
Status: Open
Bug Type: *Session related
Operating system: Linux
PHP Version: 4.0.5
Description: Possible security hole via external modification of session vars
Not really a bug, just an issue.
Previous Comments:
---------------------------------------------------------------------------
[2001-05-16 10:17:14] luci@conexim.com.au
This is kind of similar to the old file upload problem, where you could set variables in a POST.
In some cases (depends on the way the code is written), if a site stores login status (eg. user
name, etc) in session variables after an authorisation check, it is possible to pass values as the
same-named session vars, and therefore actually bypass the authorisation step getting access to
restricted areas.
---------------------------------------------------------------------------
Full Bug description available at: http://bugs.php.net/?id=10902