← CVE Intelligence

CVE-2024-11317

PHP Session Fixation PUBLISHED

Description (CNA)

Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Affected (CNA)

Vendor / productVersions
ABB / ASPECT-Enterpriseaffected 0 through 3.08.02
ABB / NEXUS Seriesaffected 0 through 3.08.02
ABB / MATRIX Seriesaffected initial through 3.08.02

CWE

CWE-384

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.