← Database

CVE-2008-5809

MEDIUM CVSS: 5.8 Published: 2009-01-02 Modified: 2026-06-16

Description

futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id.

Affected Platforms

Futomi Access Analyzer Cgi

Weakness Type

CWE-287

References