Broadcom DX NetOps Spectrum Information Exposure Vulnerability Allowing Session Hijacking

A vulnerability in Broadcom DX NetOps Spectrum on Windows and Linux, prior to version 24.3.9, allows session hijacking by exposing session tokens in URLs for certain administrative functions. This issue affects DX NetOps Spectrum versions 24.3.8 and earlier.

Impact

Exposing session tokens in URLs for administrative functions could lead to session hijacking.

Remediation

Upgrading to Broadcom DX NetOps Spectrum version 25.4.1 or later resolves this vulnerability. Instructions for upgrading can be found in the Broadcom DX NetOps Spectrum release notes.