In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with the value 0-4-11 to their browser.Referenceshttp://www.securityfocus.com/bid/91263http://blog.iancaling.com/post/145973147383