CVE-2024-34324

Deferred Deferred - Pending Action

Session Hijacking in ProPhoenix Law RMS via ASP.NET_SessionId Manipulation

Publication date: 2026-10-13

Last updated on: 2026-10-16

Assigner: MITRE

Description

An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-13

EPSS Evaluated

2026-10-18

NVD

CVE-2024-34324

EUVD

EUVD-2024-55794

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	n/a	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-384	Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

Attack-Flow Graph

Executive Summary

This vulnerability is a session hijacking issue in ProPhoenix Law RMS v2022.2403.3.101. Attackers can exploit it by injecting a specially crafted 24-character string into the ASP.NET_SessionId cookie, allowing them to take over user sessions.

Detection Guidance

To detect this session hijacking vulnerability, monitor network traffic for unusual ASP.NET_SessionId cookies. Check for requests with 24-character session IDs that may contain crafted payloads. Inspect server logs for repeated session invalidations or unexpected session state changes. Use tools like Wireshark to capture and analyze HTTP headers for manipulated session cookies.

Impact Analysis

If you use ProPhoenix Law RMS v2022.2403.3.101, attackers could hijack your active sessions. This may lead to unauthorized access to sensitive data, account takeover, or further exploitation of the system under your identity.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. However, session hijacking can lead to unauthorized access to sensitive data, which may violate confidentiality requirements under these regulations.

Mitigation Strategies

Immediately invalidate all active ASP.NET_SessionId cookies and enforce session regeneration after login. Monitor network traffic for unusual session cookie modifications or hijacking attempts.

Hi! I’m here to help you understand CVE-2024-34324. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70