Unscored CVE-2010-2270 EUVD-2010-2282GHSA-4x8p-gvcq-vjpx

Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to h…

Published Jun 14, 2010 · Updated Sep 17, 2024 · Assigned by mitre

Description

Accoria Web Server (aka Rock Web Server) 1.4.7 uses a predictable httpmod-sessionid cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.

References

http://www.ioactive.com/pdfs/AccoriaWebServer.pdf
VU#245081 third-party-advisory