NetSight
medium5.4

CVE-2024-57056

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicio…

Impact

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session.

Affected products

VendorProductAffected versions
WombatDialerWombatDialer
before 25.02

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References