Design/Logic Flaw

2015-10-1814:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON

EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.

CPENameOperatorVersion
sourceone_email_supervisorle7.1

CPE	Name	Operator	Version
	sourceone_email_supervisor	le	7.1

References

packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html

seclists.org/bugtraq/2015/Oct/58

www.securitytracker.com/id/1033787