CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.0. It affects Apache. It may be remotely exploitable.
CVE
CVE-2013-3737
Severity
MEDIUM
CVSS
5
EPSS
1.44%
Apache
Original NVD Description
The MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13, when using the file-based session store (Apache::Session::File) and certain authentication extensions, allows remote attackers to reuse unauthorized sessions and obtain user preferences and caches via unspecified vectors.