Lucene search

MitreCVE-2007-1953

HistoryApr 11, 2007 - 1:19 a.m.

CVE-2007-1953

2007-04-1101:19:00

CWE-287

mitre

web.nvd.nist.gov

session fixation

onelook

courts

online

remote attackers

web sessions

phpsessid cookie

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.

Affected configurations

Nvd

Node

onelookcourts_online

VendorProductVersionCPE
onelookcourts_online*cpe:2.3:a:onelook:courts_online:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
onelook	courts_online	*	cpe:2.3:a:onelook:courts_online::::::::

References

www.majorsecurity.de/index_2.php?major_rls=major_rls41

www.securityfocus.com/archive/1/464887/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/33502

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

Related for CVE-2007-1953