CVE-2018-1148

In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application

published May 18, 2018

CVSS
—
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application. An authenticated attacker could maintain system access due to session fixation after a user password change.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00732 · 53.8th percentile
Published
2018-05-18T22:00Z
EPSS history
Timeline
  • 18 MAY 22:00Z
    In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application
    cvelistv5