CVE-2017-14007 | BDVDB-2026-91695 Detail

ProMinent MultiFLEX M10a Controller

Description#

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-613

References#

http://www.securityfocus.com/bid/101259
https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01

Exploit#

No public exploit known

History#

Version 12017-10-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.