Session Hijacking in CommunigatePro

2003-05-0500:00:00

BUGTRAQ

vulners.com

In webmail interface session identifier is passed to server as a part of GET requiest, thouse may be discovered by third party via Referer: field.

CPENameOperatorVersion
communigateproeq4.0

CPE	Name	Operator	Version
	communigatepro	eq	4.0

References

vulners.com/securityvulns/securityvulns:doc:4482