CVE-2020-29667

Publication date

2020-12-10 08:07:32

Family

mitre

State

PUBLISHED

Description

In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration.