Lucene search
HistoryJul 02, 2008 - 5:14 p.m.
CVE-2008-2970
cve-2008-2970
session fixation
vulnerability
awt yekta
phpsessid
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%
Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by setting the PHPSESSID parameter to (1) index.php and (2) login.php in homepg/.
Affected configurations
Node
yektawebacademic_web_toolsRange≤1.4.2.8
ORyektawebacademic_web_toolsRange≤1.4.3.1
Related
prion
prion
Session fixation
2008-07-02 17:14:00
cvelist
cvelist
CVE-2008-2970
2008-07-02 17:00:00
nvd
nvd
CVE-2008-2970
2008-07-02 17:14:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%
Related for CVE-2008-2970