medium5.8
CVE-2009-3657
Session fixation vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack web sessions via unspecified vectors.
Impact
Session fixation vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack web sessions via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tim Nelson | Shared Sign-On | Versions 5.x, 6.x |