Session Revival Vulnerability in Apache::Session for Perl by Apache Software Foundation

CVE-2013-10075

What is CVE-2013-10075?

The vulnerability in Apache::Session versions through 1.94 allows for the recovery of deleted sessions due to improper handling of session storage. Specifically, the session stores such as Apache::Session::Store::File and Apache::Session::Store::DB_File can unintentionally create sessions that have previously been deleted. This flaw raises concerns around data integrity and privacy, as revived sessions might contain sensitive information that should no longer be accessible. It underscores the importance of robust session management practices to avoid unintentional data exposure.

References