Details
-
Defect (Security)
-
Resolution: Won't fix
-
Trivial
-
None
-
None
-
None
Description
Steps to reproduce:
- The sessionid length generated by ZABBIX sessionid is the result of MD5 encryption,It is a fixed value.We need its length configurable.
- MD5 encryption script path:ui\incloud\classes\api\services\CUser.php
Result:
The length of sessionid can refer to phpsessid and write the length as a parameter.
Expected:
See the attached patch file for the document description.