CGM CliniNET Missing Authentication Vulnerability Allowing Unauthenticated Session ID Access

A vulnerability in CGM CliniNET software prior to version 2024.MS4 allows unauthenticated users to download files containing session ID information. This is achieved by accessing the '/cgi-bin/CliniNET.prd/utils/userlogxls.pl' endpoint directly. The session IDs can be exploited to hijack user sessions, including those of administrators.

Impact

Exploitation of this vulnerability leads to unauthorized access to user session IDs, which can be used to hijack those sessions. This includes sessions of users with administrative privileges.