CVE-2024-8314 — Improper session handling in B&R APROL
An Incorrect Implementation of Authentication Algorithm and Exposure of Data Element to Wrong Ses-sion vulnerability in the session handling used in B&R APROL <4.4-00P5 may allo…
Published: 2025-03-25 · CVSS: 5.5 · CVSS 4.0
An Incorrect Implementation of Authentication Algorithm and Exposure of Data Element to Wrong Ses-sion vulnerability in the session handling used in B&R APROL <4.4-00P5 may allow an authenticated network attacker to take over a currently active user session without login credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7