CVE-2025-69602

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2026-01-28

Last updated on: 2026-02-09

Assigner: MITRE

Description

A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifier after successful authentication. As a result, the same session cookie value is reused for users logging in from the same browser, allowing an attacker who can set or predict a session ID to potentially hijack an authenticated session.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-28

Last Modified

2026-02-09

Generated

2026-07-06

AI Q&A

2026-01-29

EPSS Evaluated

2026-07-05

NVD

CVE-2025-69602

EUVD

EUVD-2025-206458

Affected Vendors & Products

Vendor	Product	Version / Range
altumcode	66biolinks	62.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-384	Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

Attack-Flow Graph

Executive Summary

This vulnerability is a session fixation issue in 66biolinks v62.0.0 by AltumCode. The application fails to regenerate the session identifier after a user successfully logs in, causing the same session cookie to be reused for users logging in from the same browser. This allows an attacker who can set or predict a session ID to hijack an authenticated session.

Impact Analysis

An attacker who can set or predict a session ID can hijack an authenticated session, potentially gaining unauthorized access to a user's account and sensitive information within the application.

Mitigation Strategies

To mitigate this session fixation vulnerability, ensure that the application regenerates the session identifier after successful authentication. This prevents reuse of the same session cookie value and reduces the risk of session hijacking.

Hi! I’m here to help you understand CVE-2025-69602. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70