DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, but is invalid (temporarily) during times when the admin is logged out. In other words, the cookie is functionally equivalent to a static password, and thus provides permanent access if stolen.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.html | Exploit Third Party Advisory VDB Entry |
https://github.com/1d8/publications/tree/main/cve-2021-29012 | Exploit Third Party Advisory |
https://sourceforge.net/projects/radiusmanager/ | Product Third Party Advisory |
Configurations
History
No history.
Information
Published : 2021-04-02 13:15
Updated : 2024-02-28 18:28
NVD link : CVE-2021-29012
Mitre link : CVE-2021-29012
CVE.ORG link : CVE-2021-29012
JSON object : View
Products Affected
dmasoftlab
- dma_radius_manager
CWE
CWE-287
Improper Authentication