Description

Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors.

Remediation

References

CVE-2014-2047

Related Vulnerabilities

WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Security Bypass (4.3.0)

ownCloud Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-10252)

WordPress Plugin Easy Career Openings Cross-Site Scripting (0.4)

PostgreSQL Other Vulnerability (CVE-2003-0901)

WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Information Disclosure (1.8.11)

Severity

Medium

Classification

CVE-2014-2047 CWE-287

Tags

Missing Update Known Vulnerabilities