Sielco PolyEco1000 is vulnerable to a session hijack...
Critical severity
Unreviewed
Published
Oct 26, 2023
to the GitHub Advisory Database
•
Updated Apr 4, 2024
Description
Published by the National Vulnerability Database
Oct 26, 2023
Published to the GitHub Advisory Database
Oct 26, 2023
Last updated
Apr 4, 2024
Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force attack, lack of SSL, and the session being visible in requests.
References