CVE-2010-1191: Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers to bypass i...

Security readout for executives and security teams

This CVE describes an authentication bypass in Sahana disaster management system 0.6.2.2. A remote attacker could bypass intended access controls and disable administrator authentication by directly reaching a vulnerable administrative action. For exposed Sahana systems, this can undermine control of a disaster-management application. Exposure is most likely where Sahana 0.6.2.2 is internet-accessible or reachable by untrusted users. The source bundle does not provide CPEs, supported product branches, or a complete affected-version list. Treat as high priority if Sahana is still deployed or externally reachable, because the reported impact affects administrator authentication. If no Sahana deployment exists, record the finding as not applicable. Mitigation focus: Identify any deployed Sahana instances and confirm exact versions.; Check Sahana project guidance or advisory references for fixed releases or official workarounds.; Limit access to administrative paths to trusted networks or authenticated gateways..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.