Published: 03/03/2017 Updated: 29/03/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 7.3 | Impact Score: 3.4 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Session fixation vulnerability in Zoneminder 1.30 and previous versions allows remote malicious users to hijack web sessions via the ZMSESSID cookie.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zoneminder zoneminder

Debian Bug report logs - #854272 CVE-2016-10201 CVE-2016-10202 CVE-2016-10203 CVE-2016-10204 CVE-2016-10205 CVE-2016-10206 Package: src:zoneminder; Maintainer for src:zoneminder is Dmitry Smirnov <onlyjob@debianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sun, 5 Feb 2017 17:21:02 UTC Severity: grave ...

CWE-384 https://www.foxmole.com/advisories/foxmole-2016-07-05.txt http://www.openwall.com/lists/oss-security/2017/02/05/1 http://www.securityfocus.com/bid/97116 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854272

CVE-2016-10205

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect