Vulnerability in Mitel 3300 Integrated Communication Platform
CVE-2004-0944
The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie.
EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.
Affected products
- Mitel Mitel_3300_integrated_communication_platform
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)