Vulnerability in Openssl

CVE-1999-0428

OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.

EPSS: 0.032 (87.0th percentile) — read the EPSS interpretation.

Affected products

Openssl
N/a — versions n/a

Weakness classification (CWE)

CWE-384 — Session Fixation

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)

Frequently asked questions

What is CVE-1999-0428?: CVE-1999-0428 is a vulnerability in Openssl, classified under Session Fixation. Published 1999-03-22.
Is CVE-1999-0428 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.