Lucene search

PRIOn knowledge basePRION:CVE-2007-1953

HistoryApr 11, 2007 - 1:19 a.m.

Session fixation

2007-04-1101:19:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON

Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.

References

www.majorsecurity.de/index_2.php?major_rls=major_rls41

www.securityfocus.com/archive/1/464887/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/33502

7.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON

Related for PRION:CVE-2007-1953