PT-2019-17994

Name of the Vulnerable Software and Affected Versions ThinkAgile CP-SB Storage Block BMC versions prior to 1908.M Description An internal product security audit discovered a session handling issue in the web interface of the affected product. This issue allows session IDs to be reused, potentiall...

CVE-2019-6161: Session Fixation

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB Storage Block BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain...