Security Advisory

CVE-2013-7379

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-05-16 15:00:00

Last updated 2024-08-06 18:09:16

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a string, which allows remote attackers to bypass authentication via a string in the access-key header that partially matches config.master.api.access_key.

← Browse all CVEs View on cve.org ↗