Safeline
Monthly
Unauthenticated remote attackers can forge valid administrator session cookies for the Chaitin SafeLine management console (all versions through 9.4.1) because the session-signing secret is derived from a time-seeded math/rand generator (CWE-338) and can be reconstructed offline once the install timestamp is bounded. Successful exploitation yields full administrative control of the protected sites managed by that console, matching the 9.2 CVSS 4.0 rating and the independently assessed CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H profile. Two prerequisites limit practical reach: the management console must be network-reachable from the attacker, and the attacker must be able to narrow the installation time enough to make the seed search feasible. No public exploit code and no confirmed in-the-wild exploitation were identified at the time of analysis, and consoles placed behind network segmentation, VPN, or IP allow-listing are not exposed to remote cookie forgery.
Unauthenticated remote attackers can forge valid administrator session cookies for the Chaitin SafeLine management console (all versions through 9.4.1) because the session-signing secret is derived from a time-seeded math/rand generator (CWE-338) and can be reconstructed offline once the install timestamp is bounded. Successful exploitation yields full administrative control of the protected sites managed by that console, matching the 9.2 CVSS 4.0 rating and the independently assessed CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H profile. Two prerequisites limit practical reach: the management console must be network-reachable from the attacker, and the attacker must be able to narrow the installation time enough to make the seed search feasible. No public exploit code and no confirmed in-the-wild exploitation were identified at the time of analysis, and consoles placed behind network segmentation, VPN, or IP allow-listing are not exposed to remote cookie forgery.