CVE-2022-44007

2022-11-1600:00:00

mitre

www.cve.org

vulnerability

session fixation

backclick professional 5.9.63

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.7%

JSON

An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is possible for an attacker to trick users into opening an authenticated user session for a session identifier known to the attacker, aka Session Fixation.