EMC Network Configuration Manager session fixation

Report Advisor session fixation...

ESA-2014-055: EMC Network Configuration Manager (NCM) Report Advisor Session Fixation Vulnerability

ESA-2014-055.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-055: EMC Network Configuration Manager NCM Report Advisor Session Fixation Vulnerability EMC Identifier: ESA-2014-055 CVE Identifier: CVE-2014-2509 Severity Rating: CVSS v2 Base Score: 6.9 AV:A/AC:M/Au:N/C:C/I:P/A:P Affected...

PT-2014-4747

Name of the Vulnerable Software and Affected Versions EMC Network Configuration Manager versions prior to 9.3 Description The issue concerns a session fixation vulnerability in the Report Advisor component. This allows remote attackers to hijack web sessions via a session cookie. Recommendations...

CVE-2014-2509: Undefined Security Weakness

Session fixation vulnerability in the Report Advisor RA component in EMC Network Configuration Manager NCM before 9.3 allows remote attackers to hijack web sessions via a session cookie...