Hik-Connect Hikvision patches hik-connect vulnerability

[tix3]

Hikvision announced that its platform had a vulnerability in the way it handled cookies here:​

Security Notice - Statement on Insecure Cookie Handling Vulnerability in hik-connect.com - Hangzhou Hikvision Digital Technology Co. Ltd.​

The write up of the bug here :​

I spy with my little eye... #hakvision – Vangelis Stykas – Medium

explains how it could be exploited to access and manipulate anyones device and hik-connect account
​

 

[Phil]

Thanks for sharing