10.0
Critical
CVE-2024-11317 Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an…
Description
Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASPECT-Enterprise 3.08 | earliest → 3.08.02 | No fix stated |
| NEXUS Series 3.08 | earliest → 3.08.02 | No fix stated |
| MATRIX Series 3.08 | earliest → 3.08.02 | No fix stated |
| aspect_enterprise 3.08 | earliest → 3.08.01 | No fix stated |
| nexus_series 3.08 | earliest → 3.08.01 | No fix stated |
| matrix_series 3.08 | earliest → 3.08.01 | No fix stated |
Other CVEs of ASPECT-Enterprise
The 58 CVEs of ASPECT-Enterprise →
CVE-2024-13945
Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials…
8.4
High
CVE-2024-51552
Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue…
7.1
High
CVE-2024-13958
Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue…
4.6
Medium
CVE-2024-13957
SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis…
7.0
High