Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gp27-vhqc-jqvp

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.

EPSS

Процентиль: 36%
0.00146
Низкий

Дефекты

CWE-384

Связанные уязвимости

nvd
больше 23 лет назад

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.

debian
больше 23 лет назад

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's u ...

EPSS

Процентиль: 36%
0.00146
Низкий

Дефекты

CWE-384