Vulnerability in Serendipitynz Serene Bach
CVE-2009-2165
SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.
EPSS: 0.014 (69.7th percentile) — read the EPSS interpretation.
Affected products
- Serendipitynz Serene_bach — versions 1.18r, 1.19r, 2.05r
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_JVNDB, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_JVN, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)