CVE-2014-9386

CVE-2014-9386 affects Zenoss Core before 4.2.5 SP161. The issue is an infinite lifetime for the session ID cookie, enabling potential session hijacking by an attacker with access to an unattended workstation. The CVE description notes the root cause is the cookie’s unlimited lifetime, which can l...