Carestream Clinical Collaboration Platform Session Token Exposure Vulnerability Allowing Session Hijacking

A vulnerability in Carestream Clinical Collaboration Platform version 12.2.1.5 allows remote attackers to intercept session tokens transmitted via the URL's query string. This exposure can lead to session hijacking, as attackers can use the captured tokens to impersonate users. Additionally, the application's logout functionality is weak, leaving session tokens valid even after a user has logged out.

Impact

Exposing session tokens in URLs can lead to session hijacking, allowing attackers to impersonate users by using the intercepted tokens.

Remediation

Carestream applications should avoid sending session tokens through URLs. Instead, use HTTP cookies or hidden form fields that are submitted via the POST method.