← Database

CVE-2008-6569

MEDIUM CVSS: 6.8 Published: 2009-03-31 Modified: 2026-06-16

Description

Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login page.

Affected Platforms

Cybozu Garoon

Weakness Type

CWE-287

References