CVE-2024-39275 — Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information
Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a session is closed. Forging requests with a legitimate cookie, even if the session was …
Published: 2024-09-27 · CVSS: 8.5 · CVSS 4.0
Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a session is closed. Forging requests with a legitimate cookie, even if the session was terminated, allows an unauthorized attacker to act with the same level of privileges of the legitimate user.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7