CVE-2015-1174

Critical

Published: 02/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id.

Risk Assessment

Attackers can take control of user sessions, potentially leading to unauthorized access to application data and functions.

Recommendation

It is recommended to upgrade to the latest version of the software to mitigate this vulnerability and implement additional mechanisms to secure user sessions.

Original NVD description (English source)

Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id.