Skip to content
OpenAdvisories
High · 7.2 CVE-2023-37570 EUVD-2023-41456GHSA-9rpj-r444-xvp8

Insufficient Session Expiration Vulnerability in Emagic Data Center Management Suite

Published Aug 8, 2023 · Updated Oct 10, 2024 · Assigned by CERT-In

Description

This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie.
By reusing the stolen cookie, a remote attacker could gain unauthorized access to the targeted system.

Affected products

VendorProductAffectedFixed
ESDS Emagic Data Center Management Suite ≤ V6.0 —

References