PT-2021-17460
CVE-2021-27453
·
Published
2021-12-21
·
Updated
2022-01-04
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Mesa Labs AmegaView version 3.0
Description
The issue concerns the use of default cookies in the web application, which could be manipulated to bypass authentication. This may allow an attacker to gain unauthorized access to the application.
Recommendations
For Mesa Labs AmegaView version 3.0, consider changing the default cookies to unique, secure values to prevent authentication bypass. Additionally, review and strengthen the authentication mechanism to minimize the risk of unauthorized access.
Found an issue in the description? Have something to add? Feel free to write us 👾