Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-57056 EUVD-2025-4770GHSA-chxc-45g7-vr66

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could …

Published Feb 18, 2025 · Updated Feb 18, 2025 · Assigned by mitre

Description

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session.

References