CVE-2023-48929

2023-12-0800:00:00

mitre

www.cve.org

franklin fueling systems

system sentinel anyware

session fixation

privilege escalation

sensitive information

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

43.4%

JSON

Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. The ‘sid’ parameter in the group_status.asp resource allows an attacker to escalate privileges and obtain sensitive information.

References

github.com/MatJosephs/CVEs/tree/main/CVE-2023-48929