op5 Monitor Unspecified Session Hijacking Vulnerability
BID:64606
Info
op5 Monitor Unspecified Session Hijacking Vulnerability
| Bugtraq ID: | 64606 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-0264 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 02 2012 12:00AM |
| Updated: | Jan 02 2012 12:00AM |
| Credit: | Peter Osterberg |
| Vulnerable: |
op5 op5 Monitor 5.5.0 op5 op5 Monitor 5.4.2 op5 op5 Monitor 5.4.0 op5 op5 Monitor 5.3.5 |
| Not Vulnerable: | |
Discussion
op5 Monitor Unspecified Session Hijacking Vulnerability
op5 Monitor is prone to an unspecified session-hijacking vulnerability because it fails to manage session cookies..
An attacker can exploit this issue to hijack user sessions and gain unauthorized access to the affected application.
op5 Monitor is prone to an unspecified session-hijacking vulnerability because it fails to manage session cookies..
An attacker can exploit this issue to hijack user sessions and gain unauthorized access to the affected application.
Exploit / POC
op5 Monitor Unspecified Session Hijacking Vulnerability
Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
op5 Monitor Unspecified Session Hijacking Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
op5 Monitor Unspecified Session Hijacking Vulnerability
References:
References: