JVN#31723154 LacoodaST from SpaceTag, Inc. session fixation vulnerability

LacoodaST from SpaceTag, Inc. is groupware providing schedule and task managements, etc. LacoodaST contains a session fixation vulnerability.

Impact

A remote attacker impersonating a logged in user could manipulate the operation with the user’s privilege. As a result, disclosure or alteration of information may occur.

Solution

Update the Software
Apply the latest update provided by the vendor.
For more information, refer to the vendor’s website.

Products Affected

• LacoodaST 2.1.3 and earlier
  For more information, refer to the vendor’s website.