PT-2020-7312

CVE-2012-6494

Published

2020-01-25

Updated

2020-01-30

CVSS 2.0

4.3

Medium

MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Rapid7 Nexpose versions prior to 5.5.4

Description: The issue allows remote attackers to capture a user's session and gain unauthorized access through a session hijacking vulnerability.

Recommendations: For versions prior to 5.5.4, update to version 5.5.4 or later to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾