Lucene search
Veracode Vulnerability DatabaseVERACODE:6131HistoryApr 18, 2018 - 2:38 a.m.
Session Fixation
2018-04-1802:38:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.004 Low
EPSS
Percentile
72.6%
ec-cube/ec-cube is vulnerable to session fixation attacks. The vulnerability exists due to the lack of renewal of session cookies, allowing attackers to impersonate an authenticated user.
Related
cve
cve
CVE-2018-0564
2018-04-20 13:29:00
jvn
jvn
JVN#52695336: EC-CUBE vulnerable to session fixation
2018-04-17 00:00:00
nvd
nvd
CVE-2018-0564
2018-04-20 13:29:00
prion
prion
Session fixation
2018-04-20 13:29:00
cvelist
cvelist
CVE-2018-0564
2018-04-20 13:00:00