| Package | Affected versions | Patched versions |
|---|---|---|
| crystal enterprise | = 10= 9 |
Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other users via WCSID cookie values.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free