CVE-2019-7280

Prima Systems FlexAir, Versions 2.3.38 and prior

published July 1, 2019

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02352 · 83.5th percentile
Published
2019-07-01T18:31Z
EPSS history
Timeline
  • 01 JUL 18:31Z
    Prima Systems FlexAir, Versions 2.3.38 and prior
    cvelistv5