Описание
This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. By reusing the stolen cookie, a remote attacker could gain unauthorized access to the targeted system.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.0 (включая)
cpe:2.3:a:esds.co:emagic_data_center_management:*:*:*:*:*:*:*:*
EPSS
Процентиль: 47%
0.00241
Низкий
7.2 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-613
CWE-613
Связанные уязвимости
CVSS3: 7.2
github
больше 2 лет назад
This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. By reusing the stolen cookie, a remote attacker could gain unauthorized access to the targeted system.
EPSS
Процентиль: 47%
0.00241
Низкий
7.2 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-613
CWE-613