{"uuid": "ca2fbae9-d7e9-43ec-87c4-bda16f397e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-9222", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/allegro_rompager_auth_bypass.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Jon Hart \", \"Jan Trencansky \", \"Lior Oppenheim\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits HTTP servers that appear to be vulnerable to the\\n          'Misfortune Cookie' vulnerability which affects Allegro Software\\n          Rompager versions before 4.34 and can allow attackers to authenticate\\n          to the HTTP service as an administrator without providing valid\\n          credentials.\", \"disclosure_date\": \"2014-12-17\", \"fullname\": \"auxiliary/admin/http/allegro_rompager_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"Allegro Software RomPager 'Misfortune Cookie' (CVE-2014-9222) Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/allegro_rompager_auth_bypass.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/allegro_rompager_auth_bypass\", \"references\": [\"CVE-2014-9222\", \"URL-https://web.archive.org/web/20191006135858/http://mis.fortunecook.ie/\", \"URL-https://web.archive.org/web/20190207102911/http://mis.fortunecook.ie/misfortune-cookie-suspected-vulnerable.pdf\", \"URL-https://web.archive.org/web/20190623150837/http://mis.fortunecook.ie/too-many-cooks-exploiting-tr069_tal-oppenheim_31c3.pdf\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:43.373320Z"}