docuFORM Managed Print Service Client Session Fixation Vulnerability

A session fixation vulnerability has been identified in docuFORM Managed Print Service Client version 11.11c. The issue arises because the application fails to generate a new session identifier after successful authentication, allowing an attacker to preset a session ID and trick a victim into using it.

Impact

Exploitation of this vulnerability could allow an attacker to hijack a victim's authenticated session, gaining unauthorized access to the application.