CVE-2024-11317

Publication date

2024-12-05 12:36:27

Family

ABB

State

PUBLISHED

Description

Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02