[CORE-2015-0010] - Sendio ESP Information Disclosure Vulnerability

Advisory Information Title: Sendio ESP Information Disclosure Vulnerability Advisory ID: CORE-2015-0010 Advisory URL: http://www.coresecurity.com/advisories/sendio-esp-information-disclosure-vulnerability Date published: 2015-05-22 Date of last update: 2015-05-22 Vendors contacted: Sendio...

CVE-2014-8391

CVE-2014-8391 (and CVE-2014-0999) affect Sendio ESP prior to version 7.2.4. The Web interface mishandles sessions, allowing remote authenticated users to access other users’ session data and, in one variant, to disclose session identifiers via URLs in HTTP traffic and similar responses. Two infor...

CVE-2014-8391

creationtimestamp| type| source ---|---|--- 2015-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37114...

Sendio ESP Information Disclosure Vulnerability

1. Advisory Information Title: Sendio ESP Information Disclosure Vulnerability Advisory ID: CORE-2015-0010 Advisory URL: Date published: 2015-05-22 Date of last update: 2015-05-22 Vendors contacted: Sendio Release mode: Coordinated release 2. Vulnerability Information Class: OWASP Top Ten 2013...