NVD

Id
85132  
Name
CVE-2016-2564  
Description
Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the more_entropy flag. Attackers can guess an Invision Power Board session cookie if they can predict the exact time of cookie generation.  
Reject
 
CVSS Version
 
CVSS Score
 
Severity
 
CVSS Base Score
 
CVSS Impact Subscore
 
CVSS Exploit Subscore
 
CVSS Vector
 
Pub Date
2017-04-27  
Published
2017-04-23  
Modified Date
2017-04-23  
Seq
2016-2564  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414883 85132 CVE-2017-7230 41666  View
414884 85132 CVE-2017-7230 41666  View
414885 85132 CVE-2017-7230 41666  View
417969 85132 CVE-2017-3469 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
417970 85132 CVE-2017-3469 97833  View
417971 85132 CVE-2017-3469 http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html  View
417972 85132 CVE-2017-3469 97833  View

Related JVN