CVE-2014-0999

Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by…

published June 2, 2015

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by reading the jsessionid parameter in the Referrer HTTP header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06604 · 93.8th percentile
Published
2015-06-02T14:00Z
EPSS history
Timeline
  • 02 JUN 14:00Z
    Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by…
    cvelistv5