CVE-2024-36426

In TARGIT Decision Suite versions 23.2.15007.0 and earlier (released before Autumn 2023), a security vulnerability exists because the session token is included as part of the URL. This configuration allows the token to be transmitted in cleartext HTTP sessions , potentially exposing sensitive inf...