Philips e-Alert Unit (non-medical device), Version R2.1 and prior. When authenticating a user or otherwise establishing a new user session, the software gives an attacker the opportunity to steal authenticated sessions without invalidating any existing session identifier.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2018-09-26T19:00:00Z

Updated: 2024-09-16T23:22:08.056Z

Reserved: 2018-03-20T00:00:00

Link: CVE-2018-8852

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-09-26T19:29:02.597

Modified: 2019-10-09T23:42:57.317

Link: CVE-2018-8852

cve-icon Redhat

No data.