CVE-2022-31888

Description

Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.

Affected Platforms

Weakness Type

CWE-384, CWE-384

References

• https://checkmarx.com/blog/securing-open-source-solutions-a-study-of-osticket-vu…
• https://github.com/osTicket/osTicket/commit/85a76f403a3a116176d0798f39a4c430181d…
• https://github.com/osTicket/osTicket/releases/tag/v1.16.3
• https://checkmarx.com/blog/securing-open-source-solutions-a-study-of-osticket-vu…
• https://github.com/osTicket/osTicket/commit/85a76f403a3a116176d0798f39a4c430181d…
• https://github.com/osTicket/osTicket/releases/tag/v1.16.3