Skip to content
Threat Feed
Subscribe

Product

CAT

1 brief RSS
critical advisory

Unauthenticated Session Forgery and Privilege Escalation in CAT

The CAT application relies on the predictable Java String.hashCode method for session cookie integrity, allowing attackers to forge administrative sessions by bypassing weak IP validation.

CAT
2t 1c