PT-2007-6247 · Aipo · Aipo Asp+1

Published 2007-10-01 · Updated 2017-07-29 · CVE-2007-5154

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Aipo versions 3.0.1.0 and earlier Aipo ASP versions 3.0.1.0 and earlier

Description The issue allows remote attackers to hijack web sessions.

Recommendations For Aipo versions 3.0.1.0 and earlier, update to a version later than 3.0.1.0. For Aipo ASP versions 3.0.1.0 and earlier, update to a version later than 3.0.1.0.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2007-5154

Affected Products

Aipo

Aipo Asp

References · 6

• http://secunia.com/advisories/27004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5154 · Security Note
• http://securityfocus.com/bid/25843 · Note
• http://osvdb.org/41380 · Note
• http://jvn.jp/jp/JVN%2370075625/index.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36850 · Note