Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32312
HistorySep 30, 2021 - 5:58 a.m.

Session Fixation

2021-09-3005:58:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
session fixation
zoneminder:edge
software vulnerability
hijacking accounts

EPSS

0.001

Percentile

35.0%

zoneminder:edge is vulnerable to session fixation.As an attacker can fixate his own session cookies to the next logged-in user, thereby hijacking the victim’s account. This occurs because a set of multiple cookies (between 3 and 5) is being generated when a user successfully logs in, and these sets overlap for successive logins.

EPSS

0.001

Percentile

35.0%