EIP-2026-109605

This exploit demonstrates an insecure cookie handling vulnerability in Amazon Directory Version 1.0/2.0, allowing an attacker to bypass authentication by setting a cookie via JavaScript. The PoC is a simple one-liner that sets the 'amazonadmin' cookie to 'logged in', granting unauthorized access to the admin interface.