An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interface from the same IP they are logged in as the other user.
Solution:
Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.
| Link | Tags |
|---|---|
| https://r.sec-consult.com/imageaccess | third party advisory |
| https://www.imageaccess.de/?page=SupportPortal&lang=en | patch |