Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9v9f-xp6r-cmh2

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id.

futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id.

EPSS

Процентиль: 51%
0.00285
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
около 17 лет назад

futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id.

EPSS

Процентиль: 51%
0.00285
Низкий

Дефекты

CWE-287