CVE-2013-10075 - Vulnerability Analysis
CriticalCVSS: 9.1Last Updated: May 8, 2026
Apache::Session - Authentication Bypass
Published: May 8, 2026Updated: May 8, 2026Remote Exploitable
Overview
Apache::Session <= 1.94 for Perl contains a session re-creation vulnerability caused by Apache::Session::Store::File and Apache::Session::Store::DB_File re-creating deleted sessions, letting attackers potentially revive deleted session data, exploit requires crafted session manipulation.
Severity & Score
Severity: Critical
CVSS Score: 9.1
Impact
Attackers can revive deleted sessions, potentially accessing sensitive or stale session data.
Mitigation
Update to the latest version of Apache::Session.
References
Related Resources
Details
- CVE ID
- CVE-2013-10075
- Severity
- Critical
- CVSS Score
- 9.1
- Type
- broken_authentication
- Status
- confirmed
CWE
- CWE-672
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N