JVN#36925871: e-Pares vulnerable to session fixation

e-Pares is a system that manages facility (conference rooms, etc.) information. e-Pares contains a session fixation vulnerability.

Impact

A remote attacker impersonating a logged in user may perform arbitrary operations. As a result, disclosure or alteration of information may occur.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• e-Pares V01 L01, L03, L10, L20, L30