Vulnerability Details CVE-2008-6599
cookiecheck.php in CookieCheck 1.0 stores tmp/cc_sessions under the web root with insufficient access control, which allows remote attackers to obtain session data via a direct request related to the "default session save path."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 68.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://code.google.com/p/cookiecheck/
- http://code.google.com/p/cookiecheck/source/browse/patches/cookiecheck-1.0-security-fix-1.patch?spec=svn11&r=11
- http://osvdb.org/48865
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49827
- http://code.google.com/p/cookiecheck/
- http://code.google.com/p/cookiecheck/source/browse/patches/cookiecheck-1.0-security-fix-1.patch?spec=svn11&r=11
- http://osvdb.org/48865
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49827
Products affected by CVE-2008-6599
-
cpe:2.3:a:jath_pala:cookiecheck:1.0