by Kastro
Paper/Archive/CVE-2021-29012

CVE-2021-29012

mitre — DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 88.2.882 × 2017.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, but is invalid (temporarily) during times when the admin is logged out. In other words, the cookie is functionally equivalent to a static password, and thus provides permanent access if stolen.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsourceforge.net/projects/radiusmanagerrefgithub.com/1d8/publications/tree/main/cve-2021-29012refpacketstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.html