-
Type:
Defect (Security)
-
Resolution: Won't fix
-
Priority:
Trivial
-
None
-
Affects Version/s: None
-
Component/s: API (A)
-
None
Steps to reproduce:
- The sessionid length generated by ZABBIX sessionid is the result of MD5 encryption,It is a fixed value.We need its length configurable.
- MD5 encryption script path:ui\incloud\classes\api\services\CUser.php
Result:
The length of sessionid can refer to phpsessid and write the length as a parameter.
Expected:
See the attached patch file for the document description.