Sunhillo SureLine session mechanism vulnerability

Versions prior to Sunhillo SureLine 9.1.5 contain a vulnerability related to the session mechanism. This vulnerability stems from authentication bypass; unauthenticated remote attackers can forge session cookies containing only plaintext usernames, lacking random identifiers or integrity checks. ...