CVE-2015-4594
eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new session ID, making it possible to use an existent session ID.
Date published : 2017-01-10
http://www.securityfocus.com/archive/1/537420/100/0/threaded