Description
The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875.
Unscored
CVE-2014-10399
EUVD-2014-1170GHSA-c7cg-9753-48v4
The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbitrary sessions. NOTE…
Published Feb 6, 2020 · Updated Aug 6, 2024 · Assigned by mitre