Description

The Express web application uses the express-session middleware. The middleware stores a session id in a cookie and uses a secret key to sign it for protection against data tampering. The application is using a weak/known secret key and Acunetix managed to guess this key.

Remediation

Change the value of the secret key to a long random string.

References

express-session

Related Vulnerabilities

PHP open_basedir is not set

Scheme URI Detected in Content Security Policy (CSP) Directive

H2 console publicly accessible

Wildcard Detected in Domain Portion of Content Security Policy (CSP) Directive

Redis Unauthorized Access Vulnerability

Severity

Info

Classification

CWE-693 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Weak Credentials Default Credentials