Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by reading the jsessionid parameter in the Referrer HTTP header.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2015-06-02T14:00:00
Updated: 2024-08-06T09:34:41.149Z
Reserved: 2014-01-07T00:00:00
Link: CVE-2014-0999
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-06-02T14:59:00.067
Modified: 2024-11-21T02:03:11.763
Link: CVE-2014-0999
Redhat
No data.