CVE-2020-6845

Name of the Vulnerable Software and Affected Versions TopManage OLK version 2020

Description The issue allows for a DOM-Based XSS attack, enabling the takeover of user and admin accounts due to the lack of ReadOnly protection on the Session cookie.

Recommendations For TopManage OLK version 2020, consider implementing proper cookie security, such as setting the ReadOnly flag on the Session cookie, to prevent unauthorized access and potential account takeovers. As a temporary workaround, restrict access to sensitive areas of the application to minimize the risk of exploitation.