8 matches found
CVE-2024-11318
CVE-2024-11318 IDOR - AbsysNet 2.3.1 ユーザーハイジャッキング 免責事項 このツールは、アプリケーションがこの特定の CVE-2024-11318 に対して脆弱であるかどうかを特定し、悪用するための支援を目的として設計されています。これは、サイバーセキュリティの専門家、研究者、ペネトレーションテスターが、明示的な許可を得た環境でセキュリティを評価するために使用することを意図しています。 脆弱性が確認された場合でも、悪用はアプリケーションまたはシステムの所有者から適切な許可を得た場合にのみ実行してください。...
CVE-2024-11318
An IDOR Insecure Direct Object Reference vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifier on the "/cgi-bin/ocap/" endpoint...
CVE-2024-11318
CVE-2024-11318 describes an IDOR vulnerability in AbsysNet v2.3.1 where a remote attacker can obtain an active user’s session by brute-forcing the session identifier on the /cgi-bin/ocap/ endpoint. Root cause: insecure direct object reference allowing session hijacking. Impact (per sources): pote...
CVE-2024-11318 IDOR vulnerability in AbsysNet
An IDOR Insecure Direct Object Reference vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifier on the "/cgi-bin/ocap/" endpoint...
CVE-2024-11318 IDOR vulnerability in AbsysNet
An IDOR Insecure Direct Object Reference vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifier on the "/cgi-bin/ocap/" endpoint...
AbsysNET 安全漏洞
AbsysNET is an open source library online management system from Library Technology Guides. A security vulnerability exists in AbsysNet version 2.3.1, which stems from an insecure direct object reference that allows an attacker to obtain an unauthenticated user session by brute-force attacking th...
PT-2024-9175 · Absysnet · Absysnet
Name of the Vulnerable Software and Affected Versions: AbsysNet version 2.3.1 Description: An IDOR Insecure Direct Object Reference vulnerability has been discovered, which could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifi...
