EasyCTF CVE-2015-0914 Session Management Security Bypass Vulnerability

Bugtraq ID:	74432
Class:	Access Validation Error
CVE:	CVE-2015-0914
Remote:	Yes
Local:	No
Published:	May 01 2015 12:00AM
Updated:	May 01 2015 12:00AM
Credit:	Shoji Baba
Vulnerable:	Hiroaki Sakai EasyCTF 1.3 Hiroaki Sakai EasyCTF 1.2 Hiroaki Sakai EasyCTF 1.1 Hiroaki Sakai EasyCTF 1.0
Not Vulnerable:	Hiroaki Sakai EasyCTF 1.4

EasyCTF CVE-2015-0914 Session Management Security Bypass Vulnerability

EasyCTF is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass security restrictions and obtain sensitive information or perform unauthorized actions; this may aid in launching further attacks.

EasyCTF 1.3 and prior versions are vulnerable.

EasyCTF CVE-2015-0914 Session Management Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

EasyCTF CVE-2015-0914 Session Management Security Bypass Vulnerability

References:

• EasyCTF-1.4 BugFix (Hiroaki Sakai)
  
• Vendor Homepage (Hiroaki Sakai)
  
• EasyCTF vulnerable to session management (JPCERT)