CWE Code: 384
Vulnerability Type: sql_injection
CVSS Score: 4.0
CWE Name:  Session Fixation
Summary: cloud foundry stratos, versions prior to 2.3.0, contains an insecure session that can be spoofed. when deployed on cloud foundry with multiple instances using the default embedded sqlite database, a remote authenticated malicious user can switch sessions to another user with the same session id.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2019-03-07
Last Modified Date: 2019-10-09