CVE-2025-48461

CVE-2025-48461 예측 가능한 세션 쿠키로 무차별 대입 공격을 통해 Advantech WISE 포털에 무단 액세스 가능 요약 Advantech WISE-4060 웹 포털을 조사하던 중, 웹 포털 인증에 사용되는 세션 쿠키가 60D01EXXXXX 패턴을 따르는 것을 발견했습니다. 이로 인해 권한이 없는 공격자는 모든 세션 쿠키의 가능한 모든 순열을 생성하고 포털에 대해 무차별 대입 공격을 수행하여 웹 포털 인증에 사용되는 유효한 세션 쿠키를 찾을 수 있습니다. 이 취약점은 싱가포르 사이버보안청CSA이 주최한...

PT-2025-26675 · Apache · Apache

Name of the Vulnerable Software and Affected Versions: Apache affected versions not specified Description: The issue allows an unauthenticated attacker to conduct brute force guessing and account takeover due to predictable session cookies. This could potentially allow attackers to gain root,...

F5 Networks BIG-IP : BIG-IP Analytics generates predictable session cookies (SOL14334)

The BIG-IP Analytics system generates predictable session cookies. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL14334. The text description of this plugin is C F5 Networks. include"compat.inc"; if...

Authentication flaw

The administrative web console on the TANDBERG Video Communication Server VCS before X4.3 uses predictable session cookies in 1 tandberg/web/lib/secure.php and 2 tandberg/web/user/lib/secure.php, which makes it easier for remote attackers to bypass authentication, and execute arbitrary code by...

CVE-2009-4509

The TANDBERG Video Communication Server (VCS) web management interface in versions around x4.2.1 (and possibly earlier) uses forged/predictable session cookies in tandberg/web/lib/secure.php and tandberg/web/user/lib/secure.php, enabling an unauthenticated attacker to bypass authentication and po...