Description
eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks.
References
- 20050706 eRoom Multiple Security Issues mailing-list
Unscored
CVE-2005-2185
EUVD-2005-2186GHSA-hpxv-ww7c-p8wj
eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks.
Published Jul 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre