Security Advisory
CVE-2014-10400
6.1
MEDIUM
Vulnerability Description
The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875.
Published Date
February 6, 2020
Official Source
NIST NVD Advisory