Skip to content
OpenAdvisories
High · 8.0 CVE-2023-41089 EUVD-2023-45609GHSA-chwf-pr57-9wm2

Improper Authentication in DEXMA DEXGate

Published Oct 19, 2023 · Updated Sep 12, 2024 · Assigned by icscert

Description

The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie header to generate "legitimate" requests.

Affected products

VendorProductAffectedFixed
DEXMA DexGate version 20130114 —

References