Lucene search

[email protected]CVE-2014-0635

HistoryApr 01, 2014 - 6:28 a.m.

CVE-2014-0635

2014-04-0106:28:00

CWE-287

[email protected]

web.nvd.nist.gov

cve-2014-0635

session fixation

emc vplex geosynchrony

vulnerability

hijack

web sessions

nvd

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:C/I:P/A:P

0.003 Low

EPSS

Percentile

68.1%

JSON

Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors.

CPENameOperatorVersion
emc:vplex_geosynchronyemc vplex geosynchronyeq5.0
emc:vplex_geosynchronyemc vplex geosynchronyeq5.1
emc:vplex_geosynchronyemc vplex geosynchronyeq5.2
emc:vplex_geosynchronyemc vplex geosynchronyeq4.0
emc:vplex_geosynchronyemc vplex geosynchronyeq5.2.1

CPE	Name	Operator	Version
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	5.0
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	5.1
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	5.2
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	4.0
emc:vplex_geosynchrony	emc vplex geosynchrony	eq	5.2.1

References

archives.neohapsis.com/archives/bugtraq/2014-03/0157.html

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:C/I:P/A:P

0.003 Low

EPSS

Percentile

68.1%

JSON

Related for CVE-2014-0635

seebug1 prion1 securityvulns2