← CVE Intelligence

CVE-2024-29837

Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections PUBLISHED

Description (CNA)

The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already signed in.

Affected (CNA)

Vendor / productVersions
CS Technologies Australia / Evolution Controlleraffected 2.x

CWE

CWE-284, CWE-1390

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.