CVE-2022-30769

Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user.

Score

CVSS 3.1 4.6 Medium

Status

Modified - cve@mitre.org

Published

2022-11-15

Last modified

2025-04-30

Weaknesses

CWE-384

Affected products

• Zoneminder (Zoneminder)

References

• https://github.com/ZoneMinder/zoneminder/releases
• https://medium.com/%40dk50u1/session-fixation-in-zoneminder-up-to-v1-36-12-3c850b1fbbf3