MSIR.0559 WEBLOGCOOKIE and WEBPUBLOG are mutually exclusive parameters - Revision history

JALWiccan: Automatically generated page update

2017-03-03T23:13:36Z

Automatically generated page update

← Older revision		Revision as of 23:13, 3 March 2017
Line 2:		Line 2:

	{{Template:MSIR.0559 footer}}		{{Template:MSIR.0559 footer}}
	~~[[Category:Sirius Mods messages]]~~ [[Category:MSIR.0400 - MSIR.0599]]		[[Category:MSIR.0400 - MSIR.0599]]

JALWiccan: Automatically generated page update

2016-07-11T20:34:41Z

Automatically generated page update

← Older revision		Revision as of 20:34, 11 July 2016
Line 1:		Line 1:
	Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact [[Contacting Rocket Software Technical Support\|Technical Support]] to see what might be done.		Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact [[Contacting Rocket Software Technical Support\|Technical Support]] to see what might be done.

			{{Template:MSIR.0559 footer}}
	[[Category:Sirius Mods messages]] [[Category:MSIR.0400 - MSIR.0599]]		[[Category:Sirius Mods messages]] [[Category:MSIR.0400 - MSIR.0599]]

JALWiccan: Automatically generated page update

2015-08-13T16:01:06Z

Automatically generated page update

← Older revision		Revision as of 16:01, 13 August 2015
Line 1:		Line 1:
	Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact [[Contacting Rocket Software Technical Support\|Technical Support]] to see what might be done.		Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact [[Contacting Rocket Software Technical Support\|Technical Support]] to see what might be done.

	[[Category:Sirius Mods messages]]		[[Category:Sirius Mods messages]] [[Category:MSIR.0400 - MSIR.0599]]

DmeWiccan: Automatically generated page update

2013-04-19T17:45:57Z

Automatically generated page update

← Older revision		Revision as of 17:45, 19 April 2013
Line 1:		Line 1:
	Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact [[Contacting Rocket Software Technical Support\|Technical Support]] to see what might be done.		Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact [[Contacting Rocket Software Technical Support\|Technical Support]] to see what might be done.

	[[Category:Sirius Mods ~~Messages~~]]		[[Category:Sirius Mods messages]]

JALWiccan: Automatically generated page update

2013-04-05T16:04:16Z

Automatically generated page update

← Older revision		Revision as of 16:04, 5 April 2013
Line 1:		Line 1:
	Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact Rocket Software ~~technical support~~ to see what might be done.		Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact [[Contacting Rocket Software Technical Support\|Technical Support]] to see what might be done.

	[[Category:Sirius Mods Messages]]		[[Category:Sirius Mods Messages]]

JALWiccan: Automatically generated page update

2013-03-21T23:22:45Z

Automatically generated page update

← Older revision		Revision as of 23:22, 21 March 2013
Line 1:		Line 1:
	Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact ~~Sirius~~ Software technical support to see what might be done.		Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact Rocket Software technical support to see what might be done.

	[[Category:Sirius Mods Messages]]		[[Category:Sirius Mods Messages]]

Admin: 1 revision

2010-11-09T16:41:31Z

1 revision

← Older revision	Revision as of 16:41, 9 November 2010
(No difference)

198.242.244.47: Created page with "Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid th..."

2010-11-09T14:53:43Z

Created page with "Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid th..."

New page

Both the WEBLOGCOOKIE and the WEBPUBLOG parameter were specified on a JANUS DEFINE command. WEBPUBLOG makes it possible for a public (non-password-protected) login to a userid that has system manager privileges by giving the WEBUSER userid system manager privileges either in CCASTAT or an external authorizer. While this might be intended and somewhat "safe" it is not recommended operating procedure. Specifying WEBLOGCOOKIE with WEBPUBLOG makes the situation considerably worse by making it possible for a user (or hacker) to set the login cookie to a userid of a system manager and then having WEBPUBLOG cause the user's request to run with system manager privileges. While it still might not be possible for a user (or hacker) to take advantage of this (depending on the web applications) it was deemed to dangerous to allow WEBLOGCOOKIE to be used in conjunction with WEBPUBLOG. If the ability to use both these facilities is essential, contact Sirius Software technical support to see what might be done.

[[Category:Sirius Mods Messages]]