General Information

Generic Session Poisoning Attack

Variants:
Direct 

Also Known As:
Session Poisoning, Session Data Pollution

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Session Management

Invented In:
12/01/2006

Added In:
03/12/2014


Vector Operation Method:
Override session attributes to achieve an application specific malicious affect.


Direct Variant:

Generic Session Poisoning Attack

Variant Title:
Generic Session Poisoning Attack

Typical Severity:
Major

Resources:

White Papers:

Learn More: