| ID | CVE-2011-4136 | ||||||
| Sažetak | django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:N/AC:M/Au:N/C:N/I:P/A:P | ||||||
| Zadnje važnije ažuriranje | 18-01-2018 - 02:29 | ||||||
| Objavljeno | 19-10-2011 - 10:55 |
