ngyanch/4062-1

PoC

CVE-2008-0128

view exploit source poc_in_githubauthor ngyanchpublished 2018-11-20catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2008-0128US	medium5.0	19.6% (97th)	Exploit	2008-01-23
The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the secure flag for the JSESSIONIDSSO cookie in an https session…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.