CVE-2024-49709 XSS in iKSORIS
Attackers can hijack user accounts by setting arbitrary session cookies due to lack of session destruction and validation in iKSORIS Internet Starter.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-49709?
CVE-2024-49709 is a low-severity authentication bypass vulnerability in SoftCOM iKSORIS, published on 14 Apr 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Internet Starter, one of SoftCOM iKSORIS system modules, allows for setting an arbitrary session cookie value. An attacker with an access to user's browser might set such a cookie, wait until the user logs in and then use the same cookie to take over the account. Moreover, the system does not destroy the old sessions when creating new ones, what expands the time frame in which an attack might be performed. This vulnerability has been patched in version 79.0
Weakness: CWE-384
Which versions are affected by CVE-2024-49709?
It affects 1 product.
Products include Softcom.wroc Iksoris.
How do I fix CVE-2024-49709?
No fix has been published for CVE-2024-49709 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-49709 being exploited?
There is no known exploitation of CVE-2024-49709 in the wild and no public exploit code.
Other vulnerabilities in SoftCOM iKSORIS
Sources
Also known as GHSA-95gw-69j9-7r85.