Executive Summary

This vulnerability affects GatesAir Flexiva-LX devices on certain firmware versions, where sensitive session identifiers (sids) are exposed in a publicly accessible log file. An attacker who does not need to authenticate can retrieve these session IDs and hijack active sessions, but this requires that the legitimate user had previously closed their browser window without logging out.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability allows an unauthenticated attacker to hijack sessions by obtaining valid session IDs from a public log file. This can lead to unauthorized access to the device's administrative functions, potentially compromising device security and control.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that users properly log out of the GatesAir Flexiva-LX devices before closing their browser windows to prevent session IDs from being exposed. Additionally, restrict access to the /log/Flexiva%20LX.log file to prevent unauthenticated retrieval of session identifiers. Consider updating or patching the firmware if updates become available that address this issue.

Useful 0 Not Useful 0