| Package | Affected versions | Patched versions |
|---|---|---|
| geo++ gncaster | = 1.4.0.0≤ 1.4.0.7 |
The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free