NetSight
IP …
medium6.1

CVE-2014-10399

The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbitrary sessions.

Impact

The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875.

Affected products

VendorProductAffected versions
KeplerprojectCgilua
from 5.0.0 through 5.0.1
from 5.1.0 through 5.1.4
Version 5.2

Weakness classification

CWE-384

References