PT-2017-17131

CVE-2017-6529

Published

2017-03-09

Updated

2017-08-16

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dnaLIMS version 4-2015s13

Description An issue was discovered in dnaLIMS, where it is vulnerable to session hijacking by guessing the UID parameter.

Recommendations For dnaLIMS version 4-2015s13, consider implementing additional security measures to protect against session hijacking, such as restricting access to sensitive areas of the application or using more secure session management practices. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

H00Die

Mike Cyr

Nicholas Von Pechmann

Vendors

Affected products

Weakness enumeration

CWE-613: Insufficient Session Expiration

Related identifiers