| |
Vulnerability CVE-2023-41084
Published: 2023-09-18 Modified: 2023-09-19
| Description: |
** UNSUPPPORTED WHEN ASSIGNED **
Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the web app allows on the device.
|
Type:
CWE-565 (Reliance on Cookies without Validation and Integrity Checking)
References: |
https://www.cisa.gov/news-events/ics-advisories/icsa-23-250-03
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
