CVE-2024-39275 — Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information

CVE-2024-39275

Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information PUBLISHED

Description (CNA)

Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a session is closed. Forging requests with a legitimate cookie, even if the session was terminated, allows an unauthorized attacker to act with the same level of privileges of the legitimate user.

Affected (CNA)

Vendor / product	Versions
Advantech / ADAM-5630	affected 0 before v2.5.2

CWE

CWE-539

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.