Design/Logic Flaw

2020-03-0208:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

JSON

GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors.

CPENameOperatorVersion
granditeq2.0
granditeq2.1
granditeq2.2
granditeq2.3
granditeq3.0
granditeq1.6

Name	Operator	Version
grandit	eq	2.0
grandit	eq	2.1
grandit	eq	2.2
grandit	eq	2.3
grandit	eq	3.0
grandit	eq	1.6

References

jvn.jp/en/jp/JVN73472345/index.html

www.grandit.jp/etc/20200228_letter.pdf