2012-11-18 21:00:00
certcc
PUBLISHED
Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web sessions via a jsession_id cookie.