CVE-2008-3222

Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event,"…

published July 18, 2008

CVSS
—
EPSS
3%
Percentile
86.8
In the wild
Unconfirmed
What it is

Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02889 · 86.8th percentile
Published
2008-07-18T16:00Z
EPSS history
Timeline
  • 18 JUL 16:00Z
    Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event,"…
    cvelistv5