CVE-2024-27156 — Leak of authentication sessions in secure logs
The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and…
Published: 2024-06-14 · CVSS: 6.8 · CVSS 3.1
The session cookies, used for authentication, are stored in clear-text logs. An attacker can retrieve authentication sessions. A remote attacker can retrieve the credentials and bypass the authentication mechanism. As for the affected products/models/versions, see the reference URL.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7