CVE-2008-5873: Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative acces...

Security readout for executives and security teams

CVE-2008-5873 is an authentication bypass in Yerba SACphp 6.3 and earlier. A remote attacker could gain administrative access by abusing a session cookie pattern. The provided sources do not name a patch, CVSS score, or current exploitation, but administrative bypass creates meaningful business risk if the software remains exposed. Exposure is likely limited to legacy Yerba SACphp deployments, specifically version 6.3 and earlier. Internet-facing administrative interfaces or publicly reachable SACphp instances would be the main concern. The bundle does not provide CPEs or asset-discovery indicators beyond the product and version description. Prioritize remediation if SACphp is still deployed, especially on internet-facing systems. This is old software with an administrative authentication bypass and public exploit reference. If no maintained fix exists, retirement or strong access restriction is the most defensible path. Mitigation focus: Inventory for Yerba SACphp 6.3 and earlier instances.; Check vendor or maintainer guidance for any available fixed release.; Remove or retire SACphp if it is no longer required..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.