CVE-2013-10075 - CVE House
Back to Database
Status published Unknown CVE-2013-10075

Apache::Session versions through 1.94 for Perl re-creates deleted sessions

Vulnerability Description

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-10075

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Thomas Sibley

References

More from CHORNY

View All →
CVE-2025-40931
Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id
Unknown 0

Affected Vendor

Affected Software

Apache::Session
Vulnerable Versions:
0

Timeline

Official Publish: May 8th, 2026
Last Modified: May 8th, 2026
Added to House: July 19th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-672

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.