CVE-2017-14013 | BDVDB-2026-91698 Detail

ProMinent MultiFLEX M10a Controller

Description#

A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the user's session only on the client side. This may allow an attacker to bypass protection mechanisms, gain privileges, or assume the identity of an authenticated user.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-602

References#

http://www.securityfocus.com/bid/101259
https://ics-cert.us-cert.gov/advisories/ICSA-17-285-01

Exploit#

No public exploit known

History#

Version 12017-10-17Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.