CVE Catalog
CVE-2023-38357
MediumCVSS 5.3Exploitation Probability (EPSS)
High risk3.12%
86th percentile - higher than 86% of all known CVEs
Summary
Session tokens in RWS WorldServer 11.7.3 and earlier have low entropy, allowing for enumeration. This leads to unauthorized access to user sessions.
Risk Assessment
The organization may be exposed to unauthorized access to user accounts, potentially resulting in data breaches or other serious security incidents.
Recommendation
It is recommended to upgrade to a newer version of RWS WorldServer that improves session token security and increases their entropy.
Original NVD description (English source)
Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions.