PT-2017-17131 · Dnalims · Dnalims

H00Die + 2 · Published 2017-03-09 · Updated 2017-08-16 · CVE-2017-6529

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dnaLIMS version 4-2015s13

Description An issue was discovered in dnaLIMS, where it is vulnerable to session hijacking by guessing the UID parameter.

Recommendations For dnaLIMS version 4-2015s13, consider implementing additional security measures to protect against session hijacking, such as restricting access to sensitive areas of the application or using more secure session management practices. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2017-6529

Affected Products

Dnalims

References · 5

• 🔥 https://exploit-db.com/exploits/41578 · Exploit
• 🔥 https://shorebreaksecurity.com/blog/product-security-advisory-psa0002-dnalims · Exploit
• https://osv.dev/vulnerability/CVE-2017-6529 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6529 · Security Note
• http://securityfocus.com/bid/96823 · Note