Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2014-2875
HistoryFeb 06, 2020 - 3:26 p.m.

CVE-2014-2875

2020-02-0615:26:27
mitre
www.cve.org

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

JSON

The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which allows remote attackers to hijack arbitrary sessions via a brute force attack. NOTE: CVE-2014-10399 and CVE-2014-10400 were SPLIT from this ID.

Related

nvd 3
prion 3
cve 3
debiancve 3
cvelist 2
securityvulns 2
nvd
nvd
CVE-2014-2875
2020-02-06 16:15:11
CVE-2014-10399
2020-02-06 16:15:11
CVE-2014-10400
2020-02-06 16:15:11
prion
prion
Design/Logic Flaw
2020-02-06 16:15:00
Code injection
2020-02-06 16:15:00
Code injection
2020-02-06 16:15:00
cve
cve
CVE-2014-2875
2020-02-06 16:15:11
CVE-2014-10399
2020-02-06 16:15:11
CVE-2014-10400
2020-02-06 16:15:11
debiancve
debiancve
CVE-2014-2875
2020-02-06 16:15:11
CVE-2014-10399
2020-02-06 16:15:11
CVE-2014-10400
2020-02-06 16:15:11
cvelist
cvelist
CVE-2014-10400
2020-02-06 15:26:31
CVE-2014-10399
2020-02-06 15:26:29
securityvulns
securityvulns
Syhunt Advisory: CGILua session.lua Predictable Session ID Vulnerability
2014-05-04 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-05-04 00:00:00

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

JSON
Related for CVELIST:CVE-2014-2875
nvd3prion3cve3debiancve3cvelist2securityvulns2