Description
Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.
Remediation
References
Related Vulnerabilities
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1611)
phpMyAdmin Improper Input Validation Vulnerability (CVE-2017-1000014)
LiteSpeed Web Server Out-of-bounds Read Vulnerability (CVE-2004-0112)
Drupal Core 7.x Cross-Site Request Forgery (7.0 - 7.71)
MongoDb Improper Input Validation Vulnerability (CVE-2012-6619)