Show filters
1 Total Results
Displaying 1-1 of 1
Sort by:
Attacker Value
Unknown

iTrack Easy does not use session cookies to maintain sessions and POSTs the use…

Disclosure Date: July 13, 2018 (last updated November 27, 2024)
Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded passwd field on every request. In this implementation, sessions can only be terminated when the user changes the associated password.
0