critical9.8
CVE-2023-48929
Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation.
Impact
Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. The 'sid' parameter in the group_status.asp resource allows an attacker to escalate privileges and obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Franklin-Electric | System Sentinel Anyware | Version 1.6.24.492 |