CVE-2014-10400

The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875.

The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875.

La biblioteca session.lua en CGILua versiones 5.0.x usa IDs de sesión secuenciales, lo que facilita a atacantes remotos predecir el ID de sesión y secuestrar sesiones arbitrarias. NOTA: esta vulnerabilidad fue SEPARADA de CVE-2014-2875.