CVE-2010-2270

2022-10-0316:21:09

mitre

www.cve.org

accoria web server

predictable httpmod-sessionid cookie

hijack sessions

6.6 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.3%

JSON

Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.

References

www.ioactive.com/pdfs/AccoriaWebServer.pdf

www.kb.cert.org/vuls/id/245081