TI-2013-06043 CVE-2013-7379 · GHSA-9vxc-g2jx-qj3p
The admin API in the tomato module before 0.0.6 for Node.js does not properly check the…
Priority LOW 35
The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a string, which allows remote attackers to bypass authentication via a string in the access-key header…