description: Philips e-Alert Unit (non-medical device), Version R2.1 and prior. When authenticating a user or otherwise establishing a new user session, the software gives an attacker the opportunity to steal authenticated sessions without invalidating any existing session identifier.
problem types: SESSION FIXATION CWE-384
affected:
{
product: e-Alert Unit (non-medical device)
vendor: Philips
versions:
status: affected, version: R2.1 and prior
}