CVE-2014-10400

The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary…

published February 6, 2020

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01248 · 69.1th percentile
Published
2020-02-06T15:26Z
EPSS history
Timeline
  • 06 FEB 15:26Z
    The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary…
    cvelistv5