Design/Logic Flaw

2009-01-0218:11:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.8%

JSON

futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id.

CPENameOperatorVersion
access_analyzer_cgieq4.7 pro
access_analyzer_cgieq4.0 pro
access_analyzer_cgieq2.4 std
access_analyzer_cgieq4.8 pro
access_analyzer_cgieq3.1 std
access_analyzer_cgieq4.11.3 pro
access_analyzer_cgieq3.4 std
access_analyzer_cgieq3.4 pro
access_analyzer_cgieq1.2 std
access_analyzer_cgieq4.11.0 pro

Name	Operator	Version
access_analyzer_cgi	eq	4.7 pro
access_analyzer_cgi	eq	4.0 pro
access_analyzer_cgi	eq	2.4 std
access_analyzer_cgi	eq	4.8 pro
access_analyzer_cgi	eq	3.1 std
access_analyzer_cgi	eq	4.11.3 pro
access_analyzer_cgi	eq	3.4 std
access_analyzer_cgi	eq	3.4 pro
access_analyzer_cgi	eq	1.2 std
access_analyzer_cgi	eq	4.11.0 pro