Session fixation

2019-11-0516:15:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.2%

JSON

An issue was discovered in OXID eShop 6.x before 6.0.6 and 6.1.x before 6.1.5, OXID eShop Enterprise Edition Version 5.2.x-5.3.x, OXID eShop Professional Edition Version 4.9.x-4.10.x and OXID eShop Community Edition Version: 4.9.x-4.10.x. By using a specially crafted URL, users with administrative rights could unintentionally grant unauthorized users access to the admin panel via session fixation.

CPENameOperatorVersion
eshopge4.9.0
eshople4.10.0
eshopge4.9.0
eshople4.10.0
eshopge5.2.0
eshople5.3.0
eshopge6.1.0
eshoplt6.1.5
eshopge6.0.0
eshoplt6.0.6