CVE-2024-11317: PHP Session Fixation
10.0
CVSS
Description
Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an opportunity for session takeover on a product.
Affected products:
ABB ASPECT - Enterprise v3.08.02;
NEXUS Series v3.08.02;
MATRIX Series v3.08.02
Classification
CVE ID: CVE-2024-11317
CVSS Base Severity: CRITICAL
CVSS Base Score: 10.0
Affected Products
Vendor: ABB
Product: ASPECT-Enterprise
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)