Description
Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors.
References
- http://cs.cybozu.co.jp/information/20130317notice02.php
- JVNDB-2014-000040 third-party-advisory
- JVN#00058727 third-party-advisory