CVE-2024-8314

An Incorrect Implementation of Authentication Algorithm and Exposure of Data Element to Wrong Ses-sion vulnerability in the session handling used in B&R APROL <4.4-00P5 may allow an authenticated network attacker to take over a currently active user session without login credentials.
CVSS

No CVSS.

Configurations

No configuration.

History

25 Mar 2025, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-25 05:15

Updated : 2025-03-25 05:15


NVD link : CVE-2024-8314

Mitre link : CVE-2024-8314


JSON object : View

Products Affected

No product.

CWE
CWE-488

Exposure of Data Element to Wrong Session

CWE-303

Incorrect Implementation of Authentication Algorithm