CVE-2024-8314

Name of the Vulnerable Software and Affected Versions B&R APROL versions prior to 4.4-00P5

Description The issue is related to an incorrect implementation of the authentication algorithm and exposure of a data element to the wrong session in the session handling. This could allow an authenticated network attacker to take over a currently active user session without needing login credentials.

Recommendations For versions prior to 4.4-00P5, update to version 4.4-00P5 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive session handling components until a patch is applied.