CVE-2023-37570
HIGHESDS Emagic Data Center Management Suit < 6.0 - Insufficient Session Expiration
Title source: llmDescription
This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. By reusing the stolen cookie, a remote attacker could gain unauthorized access to the targeted system.
References (1)
Core 1
Core References
Third Party Advisory
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0226
Scores
CVSS v3
7.2
EPSS
0.0054
EPSS Percentile
41.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-613
Status
published
Products (1)
esds.co/emagic_data_center_management
< 6.0
Published
Aug 08, 2023
Tracked Since
Feb 18, 2026