exploit the possibilities

UNIT4TETA TETA WEB 22.62.3.4 Session Fixation

UNIT4TETA TETA WEB 22.62.3.4 Session Fixation
Posted Aug 25, 2015
Authored by Lukasz Miedzinski

UNIT4TETA TETA WEB version 22.62.3.4 suffers from a session fixation vulnerability.

tags | advisory, web
advisories | CVE-2015-1174
MD5 | 538586c2662cd3f61564e0dcf66eb2c8

UNIT4TETA TETA WEB 22.62.3.4 Session Fixation

Change Mirror Download
Title: UNIT4TETA TETA WEB - Session Fixation
Author: Lukasz Miedzinski
Date: 08. January 2015
CVE: CVE-2015-1174

Affected software :
===================

UNIT4TETA TETA WEB 22.62.3.4 - newest version

Older versions are probably affected too.


Exploit was tested on :
======================


UNIT4TETA TETA WEB 22.62.3.4 - newest version


Description :
=============

TETA Web (former TETA Galactica) is an Internet platform interoperating
with TETA HR (former TETA Personnel) application. It provides support for
the HR departments of small, medium and very large companies.

With this platform managers obtain a tool for effective management of
subordinate business units, and HR departments can transfer some of their
tasks, such as generating reports and printouts, monitoring leave days
numbers and periodic examination dates, to employees and their supervisors.


Vulnerability :
***************

Session Fixation :
=========================================

Description :
Application is prone to session fixation and other session management
issues. For this case an attacker is able to enumerate session id and use
session of different user.

Vulnerability is confirmed by Vendor. Patch is released

Contact :
=========

Lukasz[dot]Miedzinski[at]gmail <http://gmail.com/>[dot]com


Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    34 Files
  • 2
    Jul 2nd
    15 Files
  • 3
    Jul 3rd
    9 Files
  • 4
    Jul 4th
    8 Files
  • 5
    Jul 5th
    2 Files
  • 6
    Jul 6th
    3 Files
  • 7
    Jul 7th
    1 Files
  • 8
    Jul 8th
    15 Files
  • 9
    Jul 9th
    15 Files
  • 10
    Jul 10th
    20 Files
  • 11
    Jul 11th
    17 Files
  • 12
    Jul 12th
    16 Files
  • 13
    Jul 13th
    2 Files
  • 14
    Jul 14th
    1 Files
  • 15
    Jul 15th
    20 Files
  • 16
    Jul 16th
    27 Files
  • 17
    Jul 17th
    7 Files
  • 18
    Jul 18th
    5 Files
  • 19
    Jul 19th
    12 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close