The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and can be guessed in a reasonable time.
History

Thu, 10 Oct 2024 15:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-341

cve-icon MITRE

Status: PUBLISHED

Assigner: CERT-PL

Published: 2024-01-12T14:25:12.037Z

Updated: 2024-10-10T15:36:05.135Z

Reserved: 2023-11-24T11:53:46.294Z

Link: CVE-2023-49259

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2024-01-12T15:15:09.380

Modified: 2024-11-21T08:33:08.450

Link: CVE-2023-49259

cve-icon Redhat

No data.