Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-287,
Products Affected