Vulnerability Details CVE-2009-2367
cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the session_id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.232
EPSS Ranking 97.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://osvdb.org/55586
- http://secunia.com/advisories/35666
- http://trac.metasploit.com/browser/framework3/trunk/modules/auxiliary/admin/http/iomega_storcenterpro_sessionid.rb?rev=6733
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51539
- http://osvdb.org/55586
- http://secunia.com/advisories/35666
- http://trac.metasploit.com/browser/framework3/trunk/modules/auxiliary/admin/http/iomega_storcenterpro_sessionid.rb?rev=6733
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51539
Products affected by CVE-2009-2367
-
cpe:2.3:h:iomega:storcenter_pro:-
-
cpe:2.3:o:iomega:storcenter_pro_firmware:-