Unscored CVE-2004-0944 EUVD-2004-0942GHSA-v6vg-93hj-jq4j

The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web sessi…

Published Feb 28, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie.

References

http://www.corsaire.com/advisories/c040817-002.txt
http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en
http://www.mitel.com/DocController?documentId=14223