CVE-2022-44788
An issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user logs in providing a JSESSIONID cookie that is issued by the server at the first vi…
Published: 2022-11-21 · CVSS: 6.5 · CVSS 3.1
An issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user logs in providing a JSESSIONID cookie that is issued by the server at the first visit, the cookie value is not updated after a successful login.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7