VulnerabilityModified
CVE-2021-29012
DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.
CRITICAL 9.8EPSS 3.21%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, but is invalid (temporarily) during times when the admin is logged out. In other words, the cookie is functionally equivalent to a static password, and thus provides permanent access if stolen.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 3.21% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- dmasoftlab/dma radius manager
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
- https://github.com/1d8/publications/tree/main/cve-2021-29012Exploit, Third Party Advisory
- https://sourceforge.net/projects/radiusmanager/Product, Third Party Advisory
- http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
- https://github.com/1d8/publications/tree/main/cve-2021-29012Exploit, Third Party Advisory
- https://sourceforge.net/projects/radiusmanager/Product, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.