Lucene search
Uonghoangminhchau069BB1F3-0805-480D-A6E1-B3345CDC60F3HistoryAug 14, 2023 - 8:15 a.m.
Authentication cookie is not renewed after successfully login
2023-08-1408:15:45
uonghoangminhchau
www.huntr.dev
4
authentication
cookie issue
web demo
0.0004 Low
EPSS
Percentile
14.2%
Description
ICMS62EC2566CC4B5 cookie is still same after log in. The value is not changed or renewed.
Detail:
1/ Access to the web demo and user browser’s dev tool to check the cookie.
2/ Observe the value of ICMS62EC2566CC4B5 cookie, try to log in and it is still the same.
Proof of Concept
Link video PoC: https://drive.google.com/file/d/1fjZkjVCNuCTQb-7kEVZs-XJdIkQTgUO9/view?usp=sharing
Related
cvelist
cvelist
CVE-2023-4649 Session Fixation in instantsoft/icms2
2023-08-31 00:00:19
nvd
nvd
CVE-2023-4649
2023-08-31 01:15:09
prion
prion
Session fixation
2023-08-31 01:15:00
cve
cve
CVE-2023-4649
2023-08-31 01:15:09
osv
osv
CVE-2023-4649
2023-08-31 01:15:09