Описание
TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows remote attackers to hijack web sessions, probably related to the "secure" flag for cookies in SSL sessions.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2003 (включая)
Одно из
cpe:2.3:a:transware:active\!_mail:*:*:*:*:*:*:*:*
cpe:2.3:a:transware:active\!_mail:1.422:*:*:*:*:*:*:*
cpe:2.3:a:transware:active\!_mail:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00285
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-255
Связанные уязвимости
github
почти 4 года назад
TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows remote attackers to hijack web sessions, probably related to the "secure" flag for cookies in SSL sessions.
EPSS
Процентиль: 52%
0.00285
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-255