plainblack.com
Username Password
search
Bookmark and Share
View All Tickets
Authentication problem  (#4157)
Issue

Hi. After a week vacation, today I opened my browser, and browsing in www.plainblack.com/webgui, I'm logged in as knowmad!!! I can see all his data and I could change his profile (I didn't, of course). Could it be a problem with wgSession generation? Actually, my wgSession = Qy9EBbiPmFvtpvPfc28PGQ.

F

Solution Summary
Since this has been open a while and can not be replicated or even a record in the logs of how this occurred, we're closing it for now. If it happens again, please alert someone at PB instantly so that the problem can be tracked down.
Comments
perlmonkey2
0
9/17/2008 8:52 pm

Are there any other details you can give about what happened that might allow this to be replicated?  I've looked through all the logs and I just don't see how this is possible.

faxioman
0
9/18/2008 2:14 am

When I wrote this message I was logged-in as knowmad (I wrote the bug entry from another browser as faxioman). My IP address is 213.209.215.90 and I'm using firefox 3.0.1 (Mozilla/5.0 (X11; U; Linux x86_64; it; rv:1.9.0.1) Gecko/2008072820 Firefox/3.0.1)


I have no other details :-( As I said, after a week, I come back to plainblack site and I was immediately logged-in as knowmad. I can see his profile, spend his karma, remove his account, see his photo...I was knowmad.

I'm afraid that my sites made with WebGUI (actually we have six web sites with authentication enabled) could have the same problem...


If you have other questions...I'm here.


Thanks.

F

perlmonkey2
0
11/12/2008 12:04 pm
Resolved by perlmonkey2
faxioman
0
9/3/2009 4:50 am
Confirmed
Details
Ticket Status Closed  
Rating0.0 
Submitted Byfaxioman 
Date Submitted2008-09-15 
Assigned To unassigned  
Date Assigned2019-05-21 
Assigned By 
Severity Critical (mostly not working)  
What's the bug in? plainblack.com  
WebGUI / WRE Version  
URLbugs/tracker/authentication-problem
Keywords
Ticket History
9/3/2009
9:50 AM
Closed faxioman
11/12/2008
6:04 PM
Resolved perlmonkey2
© 2019 Plain Black Corporation | All Rights Reserved