Lucene search
PRIOn knowledge basePRION:CVE-2017-5141HistoryFeb 13, 2017 - 9:59 p.m.
Session fixation
2017-02-1321:59:00
PRIOn knowledge base
www.prio-n.com
3
An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions (SESSION FIXATION).
| CPE | Name | Operator | Version |
|---|---|---|---|
| xl_web_ii_controller | eq | 0.0.0-xlwebexe128 | |
| xl_web_ii_controller | eq | 0.0.0-xlwebexe210 |
Related
nvd
nvd
CVE-2017-5141
2017-02-13 21:59:02
cve
cve
CVE-2017-5141
2017-02-13 21:59:02
cvelist
cvelist
CVE-2017-5141
2017-02-13 21:00:00
openvas
openvas
Honeywell XL Web Multiple Vulnerabilities
2017-02-03 00:00:00
ics
ics
Honeywell XL Web II Controller Vulnerabilities
2017-02-02 12:00:00