Security Advisory

CVE-2017-14007

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-17 22:00:00
Last updated 2024-08-05 19:13:41
Assigner icscert
CVSS score not scored
State PUBLISHED

Description

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the last activity, allowing an attacker to reuse an old session for authorization.