CVEvulnerability
CVE-2004-0944
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-02-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie.
References
- http://www.corsaire.com/advisories/c040817-002.txt Vendor Advisory
- http://www.mitel.com/DocController?documentId=14223 Patch, Vendor Advisory
- http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en Patch, Vendor Advisory
- http://www.corsaire.com/advisories/c040817-002.txt Vendor Advisory
- http://www.mitel.com/DocController?documentId=14223 Patch, Vendor Advisory
- http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en Patch, Vendor Advisory