cbcvebase.
CVE-2014-0090
published 2014-05-08

CVE-2014-0090: Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.

PriorityP426medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.38%
68.7th percentile
Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.

Affected

8 ranges
VendorProductVersion rangeFixed in
theforemanforeman<= 1.4.1—
theforemanforeman——
theforemanforeman——
theforemanforeman——
theforemanforeman——
theforemanforeman——
theforemanforeman——
theforemanforeman——

CVSS provenance

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.