high7.5
CVE-2005-2185
eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks.
Impact
eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Eroom | Versions 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 |