Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qp2p-gxc5-fcfh

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.

EPSS

Процентиль: 45%
0.00224
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
больше 11 лет назад

Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.

EPSS

Процентиль: 45%
0.00224
Низкий

Дефекты

CWE-20