CVE-2011-2401

2011-07-2920:55:01

[email protected]

web.nvd.nist.gov

cve-2011-2401

session fixation

hp sitescope

vulnerability

nvd

8.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:C/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.6%

JSON

Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors.

Affected configurations

NVD

Node

hpsitescopeMatch9.0

hpsitescopeMatch9.54

hpsitescopeMatch10.00

hpsitescopeMatch10.13

hpsitescopeMatch11.01

hpsitescopeMatch11.1

CPENameOperatorVersion
hp:sitescopehp sitescopeeq9.0
hp:sitescopehp sitescopeeq9.54
hp:sitescopehp sitescopeeq10.00
hp:sitescopehp sitescopeeq10.13
hp:sitescopehp sitescopeeq11.01
hp:sitescopehp sitescopeeq11.1

CPE	Name	Operator	Version
hp:sitescope	hp sitescope	eq	9.0
hp:sitescope	hp sitescope	eq	9.54
hp:sitescope	hp sitescope	eq	10.00
hp:sitescope	hp sitescope	eq	10.13
hp:sitescope	hp sitescope	eq	11.01
hp:sitescope	hp sitescope	eq	11.1