OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network.
References
Link | Resource |
---|---|
https://github.com/koto/exceed-mitm |
Configurations
Information
Published : 2014-05-19 07:55
Updated : 2014-05-19 12:21
NVD link : CVE-2013-6994
Mitre link : CVE-2013-6994
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
opentext
- exceed_ondemand