Lucene search

K
cvelistMitreCVELIST:CVE-2020-29667
HistoryDec 10, 2020 - 8:07 a.m.

CVE-2020-29667

2020-12-1008:07:32
mitre
www.cve.org
2
lan atmservice
m3 atm monitoring system
remote attacker
default cookie
insufficient session expiration
system control

AI Score

9.4

Confidence

High

EPSS

0.009

Percentile

83.4%

In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration.

AI Score

9.4

Confidence

High

EPSS

0.009

Percentile

83.4%

Related for CVELIST:CVE-2020-29667