Session Hijacking Vulnerability in Novell eDirectory Web Service

CVE-2009-4655

Summary

The dhost web service in Novell eDirectory 8.8.5 is susceptible to session hijacking due to the use of a predictable session cookie. This vulnerability allows attackers to exploit the session management mechanism, enabling them to impersonate legitimate users by modifying the session cookie. An attacker can remotely gain unauthorized access to user sessions, potentially leading to severe security breaches and unauthorized actions within the system.

References