Session fixation

OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of the login API call...

PT-2021-22090

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue is related to Incorrect Access Control, allowing for the retrieval of session information via the "rampup action" of the "login API call". This could potentially lead to unauthoriz...