Tim Nelson : Security Vulnerabilities, CVEs,
Session fixation vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack web sessions via unspecified vectors.
Max CVSS
5.8
EPSS Score
0.28%
Published
2009-10-09
Updated
2017-08-17
Cross-site request forgery (CSRF) vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users via unknown vectors.
Max CVSS
6.8
EPSS Score
0.16%
Published
2009-10-09
Updated
2017-08-17
2 vulnerabilities found