CVE-2014-0090

Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.

Date published : 2014-05-08

http://projects.theforeman.org/issues/4457

http://theforeman.org/security.html