CVE-2024-11318 — IDOR vulnerability in AbsysNet

CVE-2024-11318

IDOR vulnerability in AbsysNet PUBLISHED

Description (CNA)

An IDOR (Insecure Direct Object Reference) vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifier on the "/cgi-bin/ocap/" endpoint.

Affected (CNA)

Vendor / product	Versions
Baratz Innovación / AbsysNet	affected 2.3.1

CWE

CWE-639

References

https://www.incibe.es/en/incibe-cert/notices/aviso/idor-vulnerability-absysnet

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.