Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vc85-g439-4m62

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods.

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods.

EPSS

Процентиль: 57%
0.00346
Низкий

Связанные уязвимости

nvd
около 22 лет назад

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods.

EPSS

Процентиль: 57%
0.00346
Низкий