CVE-2023-6451: Use of Default Cryptographic Key

Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the application's authentication mechanisms...

AlayaCare Procura Portal Authorization Issues Vulnerability

AlayaCare Procura is a home health software for home and community service delivery from AlayaCare, Inc. A security vulnerability exists in AlayaCare Procura Portal versions prior to 9.0.1.2. An attacker can exploit the vulnerability to forge their own authentication cookie and bypass the...