Description
claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to hijack sessions and possibly gain administrative privileges.
References
- 20060120 Claroline 1.7.2, sso identification vulnerability mailing-list
- 16341 vdb-entry
- claroline-cookie-bypass-security(24326) vdb-entry
- 18588 third-party-advisory
- ADV-2006-0320 vdb-entry