Visiting ://10.10.10.16/backend/backend/auth/signin and then authenticate as admin:admin get me in: //10.10.10.16/backend/cms but if i click media and others returns to this //10.10.10.16/backend/backend/auth/signin
There could be a lot of reasons for this.
- the box might be playing up
- someone else might have reset it
- you might have cookies blocked or something else which is preventing the authentication being maintained
It might be worth trying:
- reset the box
- connect using burp to proxy the traffic
- if it happens again check the headers and see what is being sent when you authenticate and what is happening when you visit media.