CVE-2023-4217 | THREATINT

Assigner	Moxa
Reserved	2023-08-08
Published	2023-11-02
Updated	2024-09-05

Description

A vulnerability has been identified in PT-G503 Series versions prior to v5.2, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposing user session data to unauthorized access and manipulation.

LOW: 3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Problem types

CWE-1004: Sensitive Cookie Without 'HttpOnly' Flag

Product status

Default status

0x40029a4420

1.0

affected

References

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230203-pt-g503-series-multiple-vulnerabilities vendor-advisory

cve.org CVE-2023-4217

nvd.nist.gov CVE-2023-4217

Download JSON

https://cve.threatint.com/CVE/CVE-2023-4217

Subscribe to our newsletter to learn more about our work.