Security Advisory
CVE-2014-0090
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Session fixation vulnerability in Foreman before 1.4.2 allows remote attackers to hijack web sessions via the session id cookie.