CVE-2023-34656

Published: Jun 29, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video management system 3.1 thru 4.1 allows attackers to gain escalated privileges.

Affected (1)

Products: Video Management System Project: Video Management System

Video Management System Project

1 product

Video Management System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Video Management System Project Video Management System	From 3.1 to 4.1

Related CWEs

CWE-384

Session Fixation

Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

References (2)

https://github.com/kangjinlong1/Kang.github.io/blob/main/README.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/kangjinlong1/Kang.github.io/blob/main/README.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.