CVE-2023-48929

2023-12-0800:00:00

mitre

www.cve.org

franklin fueling systems

system sentinel anyware

session fixation

privilege escalation

sensitive information

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.4%

JSON

Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. The ‘sid’ parameter in the group_status.asp resource allows an attacker to escalate privileges and obtain sensitive information.

References

github.com/MatJosephs/CVEs/tree/main/CVE-2023-48929