CVE

Id
76687  
CVE No.
CVE-2014-9386  
Status
Candidate  
Description
Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attackers to hijack sessions by leveraging an unattended workstation, aka ZEN-12691.  
Phase
Assigned (20141212)  
Votes
None (candidate not yet proposed)  
Comments