Security Advisory

CVE-2019-7280

8.8
HIGH

Vulnerability Description

Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication.
Published Date July 1, 2019
Official Source NIST NVD Advisory