PT-2025-6739 · Unknown · Wombatdialer

Aleksandr Rudkovskii + 1 · Published 2025-02-18 · Updated 2025-02-18 · CVE-2024-57056

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WombatDialer versions prior to 25.02

Description The issue is related to incorrect cookie session handling, which results in the full session identity being written to system logs. This could be used by a malicious attacker to impersonate an existing user session.

Recommendations For versions prior to 25.02, update to a version 25.02 or later to resolve the issue. As a temporary workaround, consider restricting access to system logs to minimize the risk of exploitation.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2024-57056

Affected Products

Wombatdialer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-57056 · Security Note
• https://twitter.com/CVEnew/status/1891928706995847666 · Twitter Post
• https://wombatdialer.com/blog/blog/2025/02/18/CVE · Note
• https://t.me/cvedetector/18345 · Telegram Post