CVE-2017-12619

2019-04-2314:45:16

apache

www.cve.org

8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.4%

JSON

Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user session. Issue was reported by “stone lone”.

CNA Affected

[
  {
    "product": "Apache Zeppelin",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 0.7.3"
      }
    ]
  }
]