CVE-2025-63212

The GatesAir Flexiva-LX series (models LX100, LX300, LX600, and LX1000 ) running firmware versions 1.0.13 and 2.0 are vulnerable to session hijacking due to the exposure of sensitive session identifiers (sid ). These identifiers are stored in a publicly accessible log file located at /log/Flexiva...