CVE-2023-45600

Summary

A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” lasting two weeks, facilitates session hijacking attacks against victims. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

Affected Software

Weaknesses

• CWE-613: CWE-613 Insufficient Session Expiration

ADP Enrichment

CVE Program Container

Additional References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45600

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45600

• ←Previous
• Next→