Intrusion PreventionSalesLogix.Authentication.Bypass
Description
It indicates a possible exploit of Authentication Bypass vulnerability in the SalesLogix 6.1 that may allow remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.
Affected Products
SalesLogix Corporation SalesLogix 2000.0 and Best Software SalesLogix
Impact
Unauthorized access to the server.
Recommended Actions
Upgrade to non vulnerable server version.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 10587 |
| Created | Aug 10, 2005 |
| Updated | Jun 07, 2022 |
| Risk |
|
| CVE ID | CVE-2004-1605 CVE-2004-1612 |
| Exploit Prediction Score | 34.69% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |