Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-11317

PHP Session Fixation

Description

Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB ASPECT-Enterprise

Default version status: unaffected

  • 0 to ≤ 3.08.02affected

ABB NEXUS Series

Default version status: unaffected

  • 0 to ≤ 3.08.02affected

ABB MATRIX Series

Default version status: unaffected

  • initial to ≤ 3.08.02affected

References