Lucene search
Veracode Vulnerability DatabaseVERACODE:35463HistoryMay 10, 2022 - 10:10 a.m.
Session Hijacking
2022-05-1010:10:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
57.8%
org.wso2.carbon:org.wso2.carbon.ui is vulnerable to session hijacking. When a victim is tricked to submit a specifically crafted Try It request to an attacker-controlled server, a valid Carbon Management Console session cookie is exposed which helps the attacker to hijack the browser session.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wso2 carbon - ui | le | 4.5.3 | |
| wso2 carbon - ui | le | 4.5.3 |
Related
osv
osv
CVE-2020-24705
2020-08-27 16:15:11
cvelist
cvelist
CVE-2020-24705
2020-08-27 00:00:00
prion
prion
Design/Logic Flaw
2020-08-27 16:15:00
cve
cve
CVE-2020-24705
2020-08-27 16:15:11
nvd
nvd
CVE-2020-24705
2020-08-27 16:15:11