Session fixation

2023-12-0805:15:00

PRIOn knowledge base

www.prio-n.com

franklin fueling systems

session fixation

vulnerable

privileges escalation

sensitive information

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.5%

JSON

Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. The ‘sid’ parameter in the group_status.asp resource allows an attacker to escalate privileges and obtain sensitive information.

CPENameOperatorVersion
system_sentinel_anywareeq1.6.24.492

CPE	Name	Operator	Version
	system_sentinel_anyware	eq	1.6.24.492

References

github.com/MatJosephs/CVEs/tree/main/CVE-2023-48929