CVE-2009-4354

TransWARE Active!

published December 17, 2009

CVSS
—
EPSS
1%
Percentile
63.8
In the wild
Unconfirmed
What it is

TransWARE Active! mail 2003 build 2003.0139.0871 and earlier does not properly secure the session ID in a session cookie, which allows remote attackers to hijack web sessions, probably related to the "secure" flag for cookies in SSL sessions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01050 · 63.8th percentile
Published
2009-12-17T18:00Z
EPSS history
Timeline
  • 17 DEC 18:00Z
    TransWARE Active!
    cvelistv5