10

CVE-2007-2719

Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Systems Insight Manager Version 4.2
Hp ≫ Systems Insight Manager Version 5.0 Update sp4
Hp ≫ Systems Insight Manager Version 5.0 Update sp5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.49% 0.903
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713
http://osvdb.org/36061
http://secunia.com/advisories/25275
Vendor Advisory
http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt
Patch
http://www.securityfocus.com/archive/1/468974/100/0/threaded
http://www.securityfocus.com/bid/23988
http://www.securitytracker.com/id?1018062
http://www.vupen.com/english/advisories/2007/1823
https://exchange.xforce.ibmcloud.com/vulnerabilities/34303