Description
Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attackers to hijack sessions by leveraging an unattended workstation, aka ZEN-12691.
Unscored
CVE-2014-9386
EUVD-2014-9208GHSA-9758-jmvx-p2c5
Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attackers to hijack se…
Published Dec 15, 2014 · Updated Aug 6, 2024 · Assigned by certcc