Session fixation

2018-06-1818:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.1%

JSON

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.

CPENameOperatorVersion
privileged_access_managerge2.0.0
privileged_access_managerlt3.0.0

CPE	Name	Operator	Version
	privileged_access_manager	ge	2.0.0
	privileged_access_manager	lt	3.0.0

References

www.securityfocus.com/bid/104496

support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html