Description (CNA)
GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GRANDIT CORPORATION / GRANDIT | affected Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.