An unauthenticated session exposure vulnerability in WWBN AVideo allows remote attackers to hijack administrative sessions and disrupt platform availability.

The official docker-compose configuration exposes the memcached service on port 11211 without authentication, and the application is configured to store all user sessions within this instance. An unauthenticated attacker can remotely read, modify, or delete session data by interacting directly with the memcached service.

Successful exploitation allows an attacker to bypass authentication mechanisms entirely by hijacking active sessions, including those belonging to administrative users. This provides full control over the video platform, potentially leading to unauthorized content modification, data exfiltration, or complete service disruption. With a CVSS score of 8.1, this vulnerability poses a high risk to the confidentiality and integrity of the platform.

Immediate Action: Upgrade to version 24.0 or later immediately to apply the necessary security fixes and configuration changes.

Proactive Monitoring: Review system logs for unauthorized connections to port 11211 and monitor for unusual session activity or anomalous administrative actions.

Compensating Controls: If an immediate update is not possible, restrict network access to the memcached port 11211 to internal traffic only, or implement firewall rules to block external access to this service.

Public Exploit Available: Unknown.

The exposure of session storage via an unauthenticated service represents a critical failure in the default deployment configuration. Administrators must prioritize updating to version 24.0 or applying restrictive network access controls to the memcached service to prevent unauthorized access and potential administrative account takeover.