CVE

Id
20203  
CVE No.
CVE-2006-4099  
Status
Candidate  
Description
Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other users via WCSID cookie values.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments