Security Advisory
CVE-2015-4594
9.8
CRITICAL
Vulnerability Description
eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new session ID, making it possible to use an existent session ID.
Published Date
January 10, 2017
Official Source
NIST NVD Advisory