Unscored CVE-2009-2165 EUVD-2009-2161GHSA-4cg9-8h6p-p27g

SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, wh…

Published Jun 22, 2009 · Updated Sep 17, 2024 · Assigned by mitre

Description

SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.

References

35335 third-party-advisory
JVNDB-2009-000035 third-party-advisory
35254 vdb-entry
JVN#20689557 third-party-advisory
http://serenebach.net/log/sb221R.html