CVE-2024-57056 Information

Description

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session.

Reference

https://www.wombatdialer.com/blog/blog/2025/02/18/CVE/