novnc: VNC session hijacking
| Package(s): | novnc | CVE #(s): | CVE-2013-7436 | ||||||||||||||||||||
| Created: | April 6, 2015 | Updated: | April 8, 2015 | ||||||||||||||||||||
| Description: | From the Mageia advisory:
noVNC before 0.5.1 allows an attacker to steal insecurely set session token cookies, hijacking active or inactive VNC sessions. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||