e-Pares Session Fixation Vulnerability

e-Pares is prone to a session-fixation vulnerability.

Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application.

e-Pares 01, L01, L03, L10, L20, and L30 are vulnerable; other versions may be affected.


 

Privacy Statement
Copyright 2010, SecurityFocus