Threats tagged 'ghsa-mcxq-f773-jv28'

GatesAir Flexiva-LX devices running firmware versions 1.0.13 and 2.0, including models LX100, LX300, LX600, and LX1000, expose sensitive session identifiers in a publicly accessible log file. An unauthenticated attacker can retrieve these session IDs and hijack sessions without credentials, but only if the legitimate admin user previously closed their browser without logging out.