CVE-2017-12965

Critical

Published: 23/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

Attackers can take control of user sessions, potentially leading to unauthorized access to application data and functions.

It is recommended to upgrade to the latest version of Apache2Triad and implement additional measures to secure user sessions.

Original NVD description (English source)

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.