CVE-2024-4596

Summary

CVE-2024-4596 is a newly identified vulnerability affecting Kimai up to version 2.15.0. This issue lies in the Session Handler component, which handles PHPSESSIONID arguments. Maliciously manipulating this argument results in information disclosure. The vulnerability can be exploited remotely, but the attack's complexity is relatively high, and exploitation is known to be difficult. To mitigate this risk, upgrading to Kimai version 2.16.0 is recommended. VDB-263318 is the assigned identifier for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.