Описание
Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page.
Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2008-6569
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43427
- http://cybozu.co.jp/products/dl/notice/detail/0021.html
- http://jvn.jp/en/jp/JVN18700809/index.html
- http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000034.html
- http://osvdb.org/46564
- http://secunia.com/advisories/30871
- http://www.lac.co.jp/info/advisory/98.html
- http://www.securityfocus.com/bid/29981
Связанные уязвимости
nvd
почти 17 лет назад
Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page.