CVE-2016-10205

Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie

published March 3, 2017

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01386 · 71.8th percentile
Published
2017-03-03T15:00Z
EPSS history
Timeline
  • 03 MAR 15:00Z
    Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie
    cvelistv5