Unrated severityNVD Advisory· Published Mar 28, 2023· Updated Jan 16, 2025
CVE-2023-28395
CVE-2023-28395
Description
Osprey Pump Controller version 1.01 is vulnerable to a weak session token generation algorithm that can be predicted and can aid in authentication and authorization bypass. This may allow an attacker to hijack a session by predicting the session id and gain unauthorized access to the product.
Affected products
1- Range: 1.01
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.