medium6.8
CVE-2014-0090
Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.
Impact
Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Theforeman | Foreman | through 1.4.1 Versions 1.0, 1.1, 1.2.0, 1.2.1, 1.2.2 |