NVD

Id
49427  
Name
CVE-2009-2165  
Description
SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-06-22  
Modified Date
2009-06-26  
Seq
2009-2165  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250042 49427 CVE-2009-2165 JVN#20689557  View
250043 49427 CVE-2009-2165 JVNDB-2009-000035  View
250044 49427 CVE-2009-2165 http://serenebach.net/log/sb221R.html  View
250045 49427 CVE-2009-2165 35254  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39950 JVNDB-2009-000035 Serene Bach におけるセッション ID が推測可能な脆弱性 SerendipityNZ Limited が提供する Serene Bach には、セッション ID が推測可能である脆弱性が存在します。 CVE-2009-2165 39596 CVE-2009-2165 49427 5.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000035.html 2009-06-08 2009-06-18 View