high8.6
CVE-2023-6451
Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the…
Impact
Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the application's authentication mechanisms.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alayacare | Procura | before 9.0.1.2 |