CVE-2015-4594 (population_health)

eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new session ID, making it possible to use an existent session ID.

Source: CVE-2015-4594 (population_health)