system
Describe <CVE-2014-10399>.
user
What is <CVE-2014-10399>?
assistant
The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875..