CVE-2018-13337

Session Fixation in the web application for TerraMaster TOS version 3.1.03 allows attackers to control users' session cookies via…

mitre·CWE-384·Published 2018-11-27

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

141 chars

Session Fixation in the web application for TerraMaster TOS version 3.1.03 allows attackers to control users' session cookies via JavaScript.

NVDen

141 chars

Session Fixation in the web application for TerraMaster TOS version 3.1.03 allows attackers to control users' session cookies via JavaScript.

NVDes

162 chars

Fijación de sesión en la aplicación web para TerraMaster TOS 3.1.03 permite que los atacantes controlen las cookies de sesión de los usuarios mediante JavaScript.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N
3.0	Primary	NVD	5.4	2.8	2.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N