PT-2014-4747
CVE-2014-2509
·
Publicado
2014-07-01
·
Atualizado
2018-10-09
Descrição por
CVSS 2.0
5.4
MédiaMétricasAV:A/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
EMC Network Configuration Manager versions prior to 9.3
Description
The issue concerns a session fixation vulnerability in the Report Advisor component. This allows remote attackers to hijack web sessions via a session cookie.
Recommendations
For versions prior to 9.3, update to version 9.3 or later to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾