CVE-2013-3586

Samsung Web Viewer for Samsung DVR devices allows remote attackers to bypass authentication via an arbitrary SessionID value in a cookie.

Date published : 2013-08-27

http://www.kb.cert.org/vuls/id/882286