This vulnerability involves the insertion of sensitive information, specifically live plaintext session identifiers for authenticated users, into error log files that are downloadable. An attacker with low privileges can exploit this to hijack active administrative sessions without needing the administrator password. The affected product is Frauscher Sensortechnik FDS 102, version 2.13.0. There is no vendor-provided remediation or patch information available at this time, and no known exploits in the wild have been reported.

An attacker can gain unauthorized administrative access by hijacking active sessions through session identifiers leaked in error logs. This compromises the confidentiality and integrity of administrative sessions, potentially allowing full control over the affected system without credential knowledge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to error log archives and monitor for unauthorized downloads. Avoid exposing error logs containing sensitive session information to untrusted users.