JVN#07468800 Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi’s CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a predictable session ID vulnerability.

Impact

A remote attacker could impersonate an administrator of Access Analyzer CGI. As a result, a remote attacker could view access analysis results of the website where the software resides.

Solution

Update the Software
Update to the latest version according to the information provided by the vendor.

Products Affected

• Access Analyzer CGI Standard Version, Ver 4.0.1 and earlier
• Access Analyzer CGI Professional Version, Ver 4.11.3 and earlier