Session fixation

2020-04-1705:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

JSON

The Cloud Functions subsystem in OpenTrace 1.0 might allow fabrication attacks by making billions of TempID requests before an AES-256-GCM key rotation occurs.

CPENameOperatorVersion
opentraceeq1.0

CPE	Name	Operator	Version
	opentrace	eq	1.0

References

github.com/opentrace-community/opentrace-cloud-functions/issues/7