PT-2021-17460

CVE-2021-27453

·

Published

2021-12-21

·

Updated

2022-01-04

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView version 3.0
Description The issue concerns the use of default cookies in the web application, which could be manipulated to bypass authentication. This may allow an attacker to gain unauthorized access to the application.
Recommendations For Mesa Labs AmegaView version 3.0, consider changing the default cookies to unique, secure values to prevent authentication bypass. Additionally, review and strengthen the authentication mechanism to minimize the risk of unauthorized access.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾