Description
Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page.
References
- JVNDB-2008-000034 third-party-advisory
- 29981 vdb-entry
- http://www.lac.co.jp/info/advisory/98.html
- garoon-unspecified-session-hijacking(43427) vdb-entry
- http://cybozu.co.jp/products/dl/notice/detail/0021.html
- JVN#18700809 third-party-advisory
- 30871 third-party-advisory
- 46564 vdb-entry