EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jpcert
Published: 2015-05-01T10:00:00
Updated: 2024-08-06T04:26:11.449Z
Reserved: 2015-01-08T00:00:00
Link: CVE-2015-0914
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2015-05-01T10:59:04.043
Modified: 2015-05-01T14:23:49.363
Link: CVE-2015-0914
Redhat
No data.