Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.
| Software | From | Fixed in |
|---|---|---|
intelliants / subrion
|
4.2.1 | 4.2.1.x |
intelliants / subrion
|
- | 4.2.1.x |