| शीर्षक | Control iD Panel - Password stored in Cookies |
|---|
| विवरण | The application Control iD Panel stores user and clear text password in cookies that allows attackers to disclosure credentials, we detected this vulnerability after logging into the application and viewing the cookies stored in the browser.
Attack vector:
Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the application.
Credits:
Leonardo Teodoro, Luigi Polidório, Red Team Softwall |
|---|
| स्रोत | ⚠️ https://l6x.notion.site/PoC-Improper-Authentication-efe05964ff604beeac15f693c1e01dd6?pvs=4 |
|---|
| उपयोगकर्ता | LuigiSoftwall (UID 51872) |
|---|
| सबमिशन | 31/07/2023 06:11 PM (3 साल पहले) |
|---|
| संयम | 16/08/2023 11:06 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 237380 [Control iD Gerencia Web 1.30 Cookie कमजोर एन्क्रिप्शन] |
|---|
| अंक | 17 |
|---|