Описание
mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 0.13.1-1 |
| bionic | not-affected | 0.13.1-1build2 |
| cosmic | not-affected | 0.13.1-1build2 |
| devel | not-affected | 0.13.1-1build2 |
| disco | not-affected | 0.13.1-1build2 |
| eoan | not-affected | 0.13.1-1build2 |
| esm-apps/xenial | released | 0.12.0-2+deb9u1build0.16.04.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| esm-infra/bionic | not-affected | 0.13.1-1build2 |
| esm-infra/focal | not-affected | 0.13.1-1build2 |
Показывать по
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.
mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.
mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Tr ...
mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3