CVE-2024-2639: Bdtask Wholesale Inventory Management System session fixiation
A vulnerability was found in Bdtask Wholesale Inventory Management System up to 20240311. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257245 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2639?
CVE-2024-2639 is considered a problematic vulnerability that allows session fixation attacks.
How do I fix CVE-2024-2639?
To fix CVE-2024-2639, update the Bdtask Wholesale Inventory Management System to a version later than 20240311.
What kind of attack can be launched using CVE-2024-2639?
CVE-2024-2639 allows for remote session fixation attacks that can compromise user sessions.
Which versions of Bdtask Wholesale Inventory Management System are affected by CVE-2024-2639?
CVE-2024-2639 affects Bdtask Wholesale Inventory Management System versions up to and including 20240311.
Is CVE-2024-2639 exploitable remotely?
Yes, CVE-2024-2639 can be exploited remotely, making it critical to address.