PT-2017-2604

Name of the Vulnerable Software and Affected Versions U.motion Builder versions 1.2.1 and prior Description The issue is caused by the use of a hard-coded valid session ID in the system. This allows a remote attacker to bypass the authentication procedure by using a specially crafted user cookie...