Code injection

2010-06-1514:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.3%

JSON

Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.

CPENameOperatorVersion
rock_web_servereq1.4.7

CPE	Name	Operator	Version
	rock_web_server	eq	1.4.7

References

www.kb.cert.org/vuls/id/245081

www.ioactive.com/pdfs/AccoriaWebServer.pdf