CVE-2024-39275CWE-539

Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information

High · published September 27, 2024

CVSS v4.0
8.5
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a

session is closed. Forging requests with a legitimate cookie, even if

the session was terminated, allows an unauthorized attacker to act with

the same level of privileges of the legitimate user.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00411 · 34.3th percentile
Weakness
CWE-539 · Use of Persistent Cookies Containing Sensitive Information
Published
2024-09-27T17:38Z
EPSS history
Timeline
  • 27 SEP 17:38Z
    Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information
    cvelistv5