Lucene search
PRIOn knowledge basePRION:CVE-2014-9386HistoryDec 15, 2014 - 6:59 p.m.
Cross site scripting
2014-12-1518:59:00
PRIOn knowledge base
www.prio-n.com
4
Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attackers to hijack sessions by leveraging an unattended workstation, aka ZEN-12691.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zenoss_core | eq | 3.0.2 | |
| zenoss_core | eq | 2.4.0 | |
| zenoss_core | eq | 3.1.0 | |
| zenoss_core | eq | 2.5.2 | |
| zenoss_core | eq | 3.2.1 | |
| zenoss_core | eq | 4.2.4 | |
| zenoss_core | eq | 2.4.5 | |
| zenoss_core | eq | 2.5.0 | |
| zenoss_core | eq | 2.5.1 | |
| zenoss_core | eq | 3.2.0 |
Related
nvd
nvd
CVE-2014-9386
2014-12-15 18:59:28
CVE-2014-9246
2014-12-15 18:59:21
cve
cve
CVE-2014-9386
2014-12-15 18:59:28
CVE-2014-9246
2014-12-15 18:59:21
cvelist
cvelist
CVE-2014-9386
2014-12-15 17:27:00
prion
prion
Design/Logic Flaw
2014-12-15 18:59:00