• info
• discussion
• exploit
• solution
• references

Asterisk Predictable HTTP Manager Session ID Security Bypass Vulnerability

To exploit this issue, an attacker can use a browser. To predict the session ID, the attacker can use readily available tools.