CVE-2010-2270

Accoria Web Server aka Rock Web Server 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie...

CVE-2010-2270

CVE-2010-2270 affects Accoria Web Server (Rock Web Server) 1.4.7. The vulnerability is due to a predictable httpmod-sessionid cookie used for session management, enabling remote attackers to hijack sessions via a modified cookie. Root cause: predictable session identifiers in the server’s cookie ...