VULNERABILITY INTELLIGENCE

CVE-2012-4937

CVSS score6.8 MEDIUM

EPSS probability2.42%

CISA KEVNot currently listed

Published2012-11-18

Last modified2026-06-16

CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web sessions via a jsession_id cookie.