View Issue Details

Jump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0002245OXID eShop (all versions)4.04. Securitypublic2010-12-08 15:252012-12-10 15:30
Reportertomas_liubinas Assigned To 
PriorityimmediateSeveritymajorReproducibilityalways
Status resolvedResolutionfixed 
Summary0002245: Possible to capture the session of other user
DescriptionIn some special cases when several users are working on the same place in eShop frontend, it's possible to capture the session of other user.
TagsNo tags attached.
Theme
BrowserAll
PHP Versionany
Database Versionany

Activities

dainius.bigelis

2011-01-14 14:59

reporter   ~0003971

Last edited: 2011-02-03 13:37

 The Security Bulletin for this issue:
http://wiki.oxidforge.org/Security_bulletins/2011-002