cve/2024/CVE-2024-11318.md

### [CVE-2024-11318](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11318)
![](https://img.shields.io/static/v1?label=Product&message=AbsysNet&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%202.3.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key&color=brighgreen)

### Description

An IDOR (Insecure Direct Object Reference) vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifier on the "/cgi-bin/ocap/" endpoint.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/xthalach/CVE-2024-11318