Medium severity6.1NVD Advisory· Published Mar 13, 2017· Updated May 13, 2026
CVE-2017-6807
CVE-2017-6807
Description
mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a server can copy their session cookie to a different web site on the same server to get access to that site.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- github.com/UNINETT/mod_auth_mellon/releases/tag/v0.13.1nvdIssue TrackingPatchThird Party Advisory
- sympa.uninett.no/lists/uninett.no/arc/modmellon/2017-03/msg00008.htmlnvdNot Applicable
- www.securityfocus.com/bid/96843nvd
News mentions
0No linked articles in our index yet.