CVE-2017-12965: Critical severity apache2triad vulnerability
Published Aug 23, 2017
·Updated
Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.
Affected Software
1 affected component
Apache2Triad Apache2Triad=1.5.4
Event History
Aug 23, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12965?
CVE-2017-12965 is considered a medium severity vulnerability.
2
How do I fix CVE-2017-12965?
To fix CVE-2017-12965, upgrade to a version of Apache2Triad that addresses session fixation issues.
3
What causes the vulnerability CVE-2017-12965?
CVE-2017-12965 is caused by a session fixation vulnerability that allows attackers to hijack web sessions.
4
Who is affected by CVE-2017-12965?
CVE-2017-12965 affects users running Apache2Triad version 1.5.4.
5
What is the impact of CVE-2017-12965?
The impact of CVE-2017-12965 includes unauthorized access to user sessions, potentially leading to data theft or user impersonation.