Description (CNA)
A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tranquil IT Systems / WAPT Server | affected 2.6.0.16767 through 2.6.1.17787 |
CWE
CWE-288
References
- https://www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-0-16856-2026-06-09
- https://www.wapt.fr/en/doc/wapt-changelog.html#wapt-2-6-1-17813-2026-06-09
- https://www.wapt.fr/en/doc/wapt-security-bulletin.html
ADP enrichment
No English description supplied.
No references supplied.