Vulnerability Details CVE-2017-14013
A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the user's session only on the client side. This may allow an attacker to bypass protection mechanisms, gain privileges, or assume the identity of an authenticated user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.7%
CVSS Severity
CVSS v3 Score 5.6
CVSS v2 Score 6.8
References
Products affected by CVE-2017-14013
-
cpe:2.3:h:prominent:multiflex_m10a_controller:-
-
cpe:2.3:o:prominent:multiflex_m10a_controller_firmware:-