Lucene search
+L

3 matches found

OSV
OSV
added 2023/10/19 7:15 p.m.2 views

CVE-2023-41089

The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie header to generate "legitimate" requests...

8.8CVSS5.8AI score0.00519EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/10/19 6:13 p.m.26 views

CVE-2023-41089 Improper Authentication in DEXMA DEXGate

The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie header to generate "legitimate" requests...

8CVSS8.9AI score0.00519EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/19 6:13 p.m.42 views

CVE-2023-41089

CVE-2023-41089 affects DEXGate (DEXGate version 20130114). The vulnerability is improper authentication that can allow an attacker to impersonate a legitimate user while a session remains active, by exploiting the cookie header to generate legitimate requests. CVSS v3 base score 8.0 (ATT&CK conte...

8.8CVSS8.4AI score0.00519EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder