Описание
Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 4.5.8-1 |
| devel | DNE | |
| edgy | released | 4.5.8-1 |
| feisty | ignored | end of life, was needed |
| gutsy | DNE | |
| hardy | DNE | |
| upstream | needs-triage |
Показывать по
Ссылки на источники
5.1 Medium
CVSS2
Связанные уязвимости
Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier.
Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x ...
Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier.
5.1 Medium
CVSS2