Cobalt Vulnerability Wiki

V3 - Session Management

Session token predictable / low entropy

POC

Perform a standard request on the application
Observe session token can be decrypted or guessable or brute forceable

Impact

Low

Likelihood

Low

Ready to get started?

Schedule a Demo

Join some of these great clients we’re proud to have helped