MICROSENS NMP Web+ Insufficient Session Expiration Vulnerability Allowing Unauthorized System Access

A vulnerability exists in MICROSENS NMP Web+ versions through 3.2.5, where JSON Web Tokens (JWT) do not expire. This flaw could enable an attacker to gain unauthorized access to the system by exploiting the persistent tokens.

Impact

Exploitation of this vulnerability could allow an attacker to gain unauthorized access to the system, potentially leading to unauthorized actions or access to sensitive information.

Remediation

Users are advised to update to NMP Web+ Version 3.3.0 for Windows or Linux. Instructions for downloading the updated version are available on the MICROSENS website.