CVE-2017-5141

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior

published February 13, 2017

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. An attacker can establish a new user session, without invalidating any existing session identifier, which gives the opportunity to steal authenticated sessions (SESSION FIXATION).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01102 · 65.4th percentile
Published
2017-02-13T21:00Z
EPSS history
Timeline
  • 13 FEB 21:00Z
    An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior
    cvelistv5