CVE-2009-2165

Published: Jun 22, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.

Affected (7)

Products: Serendipitynz: Serene Bach

Serendipitynz

1 product

Serene Bach

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Serendipitynz Serene Bach	version ≤ 2.20r
Serendipitynz Serene Bach	Version 1.18r
Serendipitynz Serene Bach	Version 1.19r
Serendipitynz Serene Bach	Version 2.05r
Serendipitynz Serene Bach	Version 2.08d
Serendipitynz Serene Bach	Version 2.09r
Serendipitynz Serene Bach	Version 3.00 beta023