CVE-2024-11318 | THREATINT

Description

An IDOR (Insecure Direct Object Reference) vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifier on the "/cgi-bin/ocap/" endpoint.

Reserved 2024-11-18 | Published 2024-11-18 | Updated 2024-11-18 | Assigner INCIBE

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Product status

Default status

unaffected

2.3.1

affected

Credits

Jordi Forès finder

References

www.incibe.es/en/incibe-cert/notices/aviso/idor-vulnerability-absysnet

cve.org (CVE-2024-11318)

nvd.nist.gov (CVE-2024-11318)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.