A critical access control vulnerability in Slah allows unauthenticated attackers to steal sensitive session data, posing a significant risk of unauthorized account takeover.

The vulnerability exists within the config.php component, which fails to enforce proper authentication checks, allowing unauthenticated remote attackers to access sensitive system information.

The ability for an unauthenticated attacker to retrieve active session credentials presents a severe risk to organizational security. This exposure could facilitate full unauthorized access to user accounts or administrative interfaces, leading to data breaches and potential lateral movement within the network. With a CVSS score of 7.5, this high severity flaw warrants immediate attention to prevent compromise of session integrity.

Immediate Action: Monitor vendor communication channels for the release of a security patch and apply it immediately upon availability.

Proactive Monitoring: Review web server and application logs for suspicious access patterns targeting the config.php file or unusual session activity.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block direct access to config.php from untrusted external IP addresses.

Public Exploit Available: Unknown

Given the exposure of session credentials, this vulnerability should be prioritized for remediation. Administrators must restrict access to the affected configuration file and prioritize the deployment of the vendor fix as soon as it is published to mitigate the risk of session hijacking and unauthorized system access.