Turkiye Electricity Transmission Corporation Mobile Application Insufficient Session Expiration Vulnerability Allowing Session Hijacking

A vulnerability allowing session hijacking has been identified in the Turkiye Electricity Transmission Corporation (TEİAŞ) Mobile Application, specifically in versions 1.6.2 prior to 1.13. This vulnerability arises from insufficient session expiration, which could be exploited by cyber attackers to hijack user sessions.

Impact

Exploitation of this vulnerability allows for session hijacking, where an attacker can take over a user's session, potentially leading to unauthorized actions or access within the application.

Remediation

Users are advised to update the application to version 1.13 or later.