CVE-2021-47663

Improper session handling PUBLISHED

Description (CNA)

Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access.

Affected (CNA)

Vendor / product	Versions
Franka Robotics / Franka Emika Robot	affected 0.0.0 through 4.0.3

CWE

CWE-613

References

https://www.sciencedirect.com/science/article/pii/S2351978921001657

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.