Skip to content
OpenAdvisories
Medium · 5.9 CVE-2022-30623 EUVD-2022-52454GHSA-5mcf-4jxx-fhq7

Chcnav - P5E GNSS Authentication bypass

Published Jul 18, 2022 · Updated Sep 17, 2024 · Assigned by INCD

Description

The server checks the user's cookie in a non-standard way, and a value is entered in the cookie value name of the status and its value is set to true to bypass the identification with the system using a username and password.

Affected products

VendorProductAffectedFixed
Chcnav Chcnav - P5E GNSS 4.2 – < 4.1* 4.1*

References