5 matches found
CVE-2018-4300
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10...
PT-2018-3598
Name of the Vulnerable Software and Affected Versions CUPS versions prior to 2.2.10 Description The issue is related to the CUPS web interface, where the session cookie is easily guessable on Linux systems, allowing unauthorized scripted access when the web interface is enabled. This is due to a...
Session fixation
claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...
CVE-2006-0411: Undefined Security Weakness
claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...