writeups.xyz / Session Token Enumeration in RWS WorldServer

Submitter : c2a

Date: 19 July 2023

Bounty : undisclosed

Vulnerabilities :

• Session Management Issue
• Bruteforce

Programs :

• Trados (WorldServer)

Authors :

• RedTeam Pentesting (@RedTeamPT)

Link :
https://www.redteam-pentesting.de/de/advisories/rt-sa-2023-001/-session-token-enumeration-in-rws-worldserver