Canopus Internet Banking FIVE - Auth Bypass Vulnerability

Link: http://virtualsepo.blogspot.com/2012/01/canopus-internet-banking-five-auth.html

Introduction:
=============
Automation of banks, small and medium sized, money transfer systems, corporate treasuries,
e-payment systems, e-currency bureaux de change,automation of payment institution, - is the
key activity areas are of CANOPUS Software Ltd. (established in 1992) Today, our clients are
dozens of banks and financial companies, payment institutions, registered in various jurisdictions.

(Copy of the Vendor Homepage: http://www.canopuslab.com/ )


Status:
========
Published


Exploitation-Technique:
=======================
Remote


Severity:
=========
Critical


Details:
========
An Auth Bypass vulnerability is detected on the online banking content management system of the Canopus Software.
The bypass vulnerability is located on the unparsed login form of the web-application banking system.
Successful exploitation allows  an attacker to bypass the login restriction of the banking system with ID 1 (Admin).

Risk:
=====
The security risk of the Auth Bypass Vulnerability is estimated as critical.