CVE-2009-3585
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.7%
Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web sessions by setting the session identifier via a manipulation that leverages a second web server within the same domain.
Produtos afetados
n/a · n/aReferências
http://bestpractical.typepad.com/files/rt-3.0.0-session_fixation.v3.patchhttp://bestpractical.typepad.com/files/rt-3.0.1-3.0.6-session_fixation.v3.patchhttp://bestpractical.typepad.com/files/rt-3.0.7-3.6.1-session_fixation.v3.patchhttp://bestpractical.typepad.com/files/rt-3.6.2-3.6.3-session_fixation.v3.patchhttp://bestpractical.typepad.com/files/rt-3.6.4-3.6.9-session_fixation.v2.patchhttp://bestpractical.typepad.com/files/rt-3.8-session_fixation.patchhttp://blog.bestpractical.com/2009/11/session-fixation-vulnerability.htmlhttp://lists.bestpractical.com/pipermail/rt-announce/2009-November/000176.htmlhttp://lists.bestpractical.com/pipermail/rt-announce/2009-November/000177.htmlhttp://secunia.com/advisories/37546http://secunia.com/advisories/37728https://exchange.xforce.ibmcloud.com/vulnerabilities/54472