CVE-2005-2185 in eRoom

Summary

eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 07/10/2005
• Disclosure: 07/11/2005
• Moderation: VulDB entry created
• Entries: VDB-25716 (1)
• CPE: ready
• CWE: CWE-294 (Unconfirmed)
• CVSS: 7.3
• EPSS: 0.00636
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-2185
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-2185
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-2185/