CVE-2024-28144 - Vulnerability Details - OpenCVE

An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interface from the same IP they are logged in as the other user.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00033.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

The vendor does not provide a patch for this issue to date but an update is planned for the future.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://seclists.org/fulldisclosure/2024/Dec/2
https://r.sec-consult.com/imageaccess
https://www.imageaccess.de/?page=SupportPortal&lang=en

History

Mon, 03 Nov 2025 22:30:00 +0000

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2024/Dec/2

Fri, 13 Dec 2024 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 12 Dec 2024 13:45:00 +0000

Type	Values Removed	Values Added
Description		An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interface from the same IP they are logged in as the other user.
Title		Broken Access Control
Weaknesses		CWE-384
References		https://r.sec-consult.com/imageaccess https://www.imageaccess.de/?page=SupportPortal&lang=en

MITRE

Status: PUBLISHED

Assigner: SEC-VLab

Published: 2024-12-12T13:24:16.685Z

Updated: 2025-11-03T21:54:29.638Z

Reserved: 2024-03-05T09:15:40.202Z

Link: CVE-2024-28144

Vulnrichment

Updated: 2025-11-03T21:54:29.638Z

NVD

Status : Awaiting Analysis

Published: 2024-12-12T14:15:22.330

Modified: 2025-11-03T22:16:50.363

Link: CVE-2024-28144

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-28144", "assignerOrgId": "551230f0-3615-47bd-b7cc-93e92e730bbf", "state": "PUBLISHED", "assignerShortName": "SEC-VLab", "dateReserved": "2024-03-05T09:15:40.202Z", "datePublished": "2024-12-12T13:24:16.685Z", "dateUpdated": "2025-11-03T21:54:29.638Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "Scan2Net", "vendor": "Image Access GmbH", "versions": [{"changes": [{"at": "7.42B", "status": "unknown"}], "lessThanOrEqual": "7.42B", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Daniel Hirschberger (SEC Consult Vulnerability Lab)"}, {"lang": "en", "type": "finder", "value": "Tobias Niemann (SEC Consult Vulnerability Lab)"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p></p><p></p><div><p><span style=\"background-color: var(--wht);\">An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. I</span><span style=\"background-color: var(--wht);\">f two users access the web interface from the same IP they are logged in as the other user.</span></p><div></div><p></p></div><p></p><p></p>"}], "value": "An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interface from the same IP they are logged in as the other user."}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The SEC Consult Vulnerability Lab has published proof of concept material in the technical security advisory.<br>"}], "value": "The SEC Consult Vulnerability Lab has published proof of concept material in the technical security advisory."}], "impacts": [{"capecId": "CAPEC-61", "descriptions": [{"lang": "en", "value": "CAPEC-61 Session Fixation"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-384", "description": "CWE-384 Session Fixation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "551230f0-3615-47bd-b7cc-93e92e730bbf", "shortName": "SEC-VLab", "dateUpdated": "2024-12-12T13:24:16.685Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://r.sec-consult.com/imageaccess"}, {"tags": ["patch"], "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The vendor does not provide a patch for this issue to date but an update is planned for the future."}], "value": "The vendor does not provide a patch for this issue to date but an update is planned for the future."}], "source": {"discovery": "UNKNOWN"}, "title": "Broken Access Control", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-12-13T16:30:17.378452Z", "id": "CVE-2024-28144", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-13T16:31:07.480Z"}}, {"title": "CVE Program Container", "references": [{"url": "http://seclists.org/fulldisclosure/2024/Dec/2"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T21:54:29.638Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://seclists.org/fulldisclosure/2024/Dec/2"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T21:54:29.638Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-28144", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-13T16:30:17.378452Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-13T16:30:47.105Z"}}], "cna": {"title": "Broken Access Control", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Daniel Hirschberger (SEC Consult Vulnerability Lab)"}, {"lang": "en", "type": "finder", "value": "Tobias Niemann (SEC Consult Vulnerability Lab)"}], "impacts": [{"capecId": "CAPEC-61", "descriptions": [{"lang": "en", "value": "CAPEC-61 Session Fixation"}]}], "affected": [{"vendor": "Image Access GmbH", "product": "Scan2Net", "versions": [{"status": "affected", "changes": [{"at": "7.42B", "status": "unknown"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "7.42B"}], "defaultStatus": "affected"}], "exploits": [{"lang": "en", "value": "The SEC Consult Vulnerability Lab has published proof of concept material in the technical security advisory.", "supportingMedia": [{"type": "text/html", "value": "The SEC Consult Vulnerability Lab has published proof of concept material in the technical security advisory.<br>", "base64": false}]}], "solutions": [{"lang": "en", "value": "The vendor does not provide a patch for this issue to date but an update is planned for the future.", "supportingMedia": [{"type": "text/html", "value": "The vendor does not provide a patch for this issue to date but an update is planned for the future.", "base64": false}]}], "references": [{"url": "https://r.sec-consult.com/imageaccess", "tags": ["third-party-advisory"]}, {"url": "https://www.imageaccess.de/?page=SupportPortal&lang=en", "tags": ["patch"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. If two users access the web interface from the same IP they are logged in as the other user.", "supportingMedia": [{"type": "text/html", "value": "<p></p><p></p><div><p><span style=\"background-color: var(--wht);\">An attacker who can spoof the IP address and the User-Agent of a logged-in user can takeover the session because of flaws in the self-developed session management. I</span><span style=\"background-color: var(--wht);\">f two users access the web interface from the same IP they are logged in as the other user.</span></p><div></div><p></p></div><p></p><p></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-384", "description": "CWE-384 Session Fixation"}]}], "providerMetadata": {"orgId": "551230f0-3615-47bd-b7cc-93e92e730bbf", "shortName": "SEC-VLab", "dateUpdated": "2024-12-12T13:24:16.685Z"}}}, "cveMetadata": {"cveId": "CVE-2024-28144", "state": "PUBLISHED", "dateUpdated": "2025-11-03T21:54:29.638Z", "dateReserved": "2024-03-05T09:15:40.202Z", "assignerOrgId": "551230f0-3615-47bd-b7cc-93e92e730bbf", "datePublished": "2024-12-12T13:24:16.685Z", "assignerShortName": "SEC-VLab"}, "dataVersion": "5.2"}