Security Advisory
CVE-2012-4937
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web sessions via a jsession_id cookie.