Executive Summary

This vulnerability involves the equipment granting a JWT token for each connection in the timeline, but during an active valid session, an attacker can hijack the token. This allows the attacker to modify security parameters, gain unauthorized access, or steal the session without the legitimate user detecting it. The web server permits reuse of an old session JWT token while the legitimate session is still active.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow an attacker to hijack an active session by reusing an old JWT token, potentially enabling unauthorized access, modification of security parameters, or session theft without detection by the legitimate user. This can lead to compromised security and unauthorized actions within the affected system.

Useful 0 Not Useful 0