Default credentials

Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device...

CVE-2019-6563

Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device...

CVE-2019-6563: Predictable from Observable State

Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device...

SUSE-SU-2018:0337-1 Security update for libICE

This update for libICE fixes the following issues: - CVE-2017-2626: Creation of the ICE auth session cookies used insufficient randomness, making these cookies predictable. A more random generation method has been implemented. boo1025068...

PT-2017-3776

Name of the Vulnerable Software and Affected Versions Moxa IKS and EDS affected versions not specified Description The issue is related to the generation of a predictable cookie using an MD5 hash, which can be exploited by an attacker to capture the administrator's password. This could potentiall...

Insecure Cookies

atlas-webapp is vulnerable to insecure cookies. The library uses a predictable cookie name in the webapp. This can allow a malicious user to access sensitive data contained in the cookies...

Code injection

Accoria Web Server aka Rock Web Server 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie...

CVE-2010-2270: Undefined Security Weakness

Accoria Web Server aka Rock Web Server 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie...

Novell eDirectory 8.8.5 - DHost Weak Session Cookie Session Hijacking (Metasploit)

source: https://www.securityfocus.com/bid/38782/info Novell eDirectory is prone to a session-hijacking vulnerability. An attacker can exploit this issue to gain access to the affected application. Novell eDirectory 8.8.5 is vulnerable; other versions may also be affected. $Id:...

CVE-2009-4655

CVE-2009-4655 affects Novell eDirectory 8.8.5 DHOST web service, which uses a predictable session cookie that can enable session hijacking by a remote attacker. The PacketStorm/MSF and Nessus/OpenVAS entries corroborate a cookie-based hijack vector tied to DHost. Evidence notes the vulnerability ...

Novell BorderManager ISAKMP weak cryptography

Predictable cookie generation allows DoS and replay attacks...

[SA22699] Novell BorderManager ISAKMP Predictable Cookie Security Issue

TITLE: Novell BorderManager ISAKMP Predictable Cookie Security Issue SECUNIA ADVISORY ID: SA22699 VERIFY ADVISORY: http://secunia.com/advisories/22699/ CRITICAL: Less critical IMPACT: Security Bypass, DoS WHERE: From remote SOFTWARE: Novell BorderManager 3.x http://secunia.com/product/378/...