CVE-2024-34324

Summary

The flaw allows attackers to hijack user sessions by injecting a crafted 24-character string into the ASP.NET_SessionId cookie, potentially leading to unauthorized access to sensitive legal case data and system functionality.

Exploitability

Exploitation is relatively straightforward requiring only a single HTTP request with a specially crafted session ID cookie, with no authentication or user interaction required.

Blast radius

The impact could be severe across all users of the ProPhoenix Law RMS system, potentially exposing confidential legal documents and enabling unauthorized access to case management features.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.590 or later to address this session hijacking vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.