CVE-2014-0090

Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie

published May 8, 2014

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01379 · 71.9th percentile
Published
2014-05-08T14:00Z
EPSS history
Timeline
  • 08 MAY 14:00Z
    Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie
    cvelistv5