{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1539 Steal Web Session Cookie","home_page_url":"https://patchfirst.co/technique/T1539/","feed_url":"https://patchfirst.co/feed/technique/T1539.json","description":"New and newly exploited CVEs that lead to ATT&CK T1539 Steal Web Session Cookie, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2019-6563","url":"https://patchfirst.co/cve/CVE-2019-6563/","title":"CVE-2019-6563: Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the…","content_text":"ICS-CERT · Moxa IKS, EDS. Not in CISA KEV. EPSS 1.7% (higher than 77.8% of CVEs). ATT&CK: T1110 Brute Force; T1539 Steal Web Session Cookie; T1078 Valid Accounts. Priority 15.6 of 100.","summary":"Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the…","date_published":"2019-03-05T00:00:00.000Z","date_modified":"2024-09-16T18:44:20.000Z","tags":["T1110","T1539","T1078"],"_patchfirst":{"reason":"published","priority":15.6,"kev":null,"epss":{"score":0.01748,"percentile":0.77806},"cvss":null,"vendor":"ICS-CERT","product":"Moxa IKS, EDS","techniqueIds":["T1110","T1539","T1078"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}