WUI Session not expiring - security issue

Vinzenz Meyer

August 13, 2021 08:26

WUI Session of Virtual LoadMaster (latest firmware) is not expiring when on Statistics > Real Time Statistics ( > Virtual Services , and probably all the other "tabs")

Probably due the periodic self refresh of that page.

Using: Firefox / Chrome

Does anyone else notice this behavior?

As this can keep a session alive for an unlimited period of time, I ask to fix this and related issue if it's not only happening in our environment.

Thanks.

Vinzenz Meyer

PS: Should I create a support ticket or is this post enough to reach Kemp Devs?

3 comments

Nick Smylie

August 13, 2021 12:47

I will create a ticket for you and someone will reach out to you.

Eljakim Schrijvers

November 10, 2021 10:24

We actually use this feature, it allows us to open up that specific screen on a machine and use it as a monitor.

I understand the security concern, so if Kemp intends to do something about this, please make it optional.

Nick Smylie

November 10, 2021 13:15

No planned changes are happening around this.

Please log in to leave a comment.