PT-2021-17460 · Mesa · Mesa Labs Amegaview

Stephen Yackey · Published 2021-12-21 · Updated 2022-01-04 · CVE-2021-27453

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mesa Labs AmegaView version 3.0

Description The issue concerns the use of default cookies in the web application, which could be manipulated to bypass authentication. This may allow an attacker to gain unauthorized access to the application.

Recommendations For Mesa Labs AmegaView version 3.0, consider changing the default cookies to unique, secure values to prevent authentication bypass. Additionally, review and strengthen the authentication mechanism to minimize the risk of unauthorized access.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2021-27453

Affected Products

Mesa Labs Amegaview

References · 3

• https://osv.dev/vulnerability/CVE-2021-27453 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27453 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-147-03 · Note