PT-2013-2415

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.1 through 5.2 IBM Sterling File Gateway versions 2.1 through 2.2 Description The issue allows remote attackers to hijack sessions and obtain sensitive information via a brute-force attack, due to the use ...

PT-2013-2351

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.1 through 5.2 IBM Sterling File Gateway versions 2.1 through 2.2 Description The issue allows remote authenticated users to hijack sessions by modifying the cookie path. Recommendations For IBM Sterling B...

CVE-2013-0539: Undefined Security Weakness

An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack...

CVE-2013-4732

The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU662676...

Code injection

The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU662676...

CVE-2013-4732

The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU662676...

PT-2013-5165 · Monroe Electronics +1 · R189 One-Net +1

Name of the Vulnerable Software and Affected Versions: Digital Alert Systems DASDEC EAS device versions 2.0-2 through 2.0-2 Monroe Electronics R189 One-Net EAS device versions 2.0-2 through 2.0-2 Description: The administrative web server uses predictable session ID values, making it easier for...

CVE-2013-4732: Undefined Security Weakness

The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU662676...

Barracuda CudaTel Communication Server 2.6.002.040 XSS

Title: ====== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities Date: ===== 2013-06-25 References: =========== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 VL-ID: ===== 778 Common Vulnerability Scoring System:...

Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=778 BARRACUDA NETWORK SECURITY ID: BNSEC-811 Release Date: ============= 2013-06-24 Vulnerability Laboratory ID VL-ID:...

Design/Logic Flaw

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method...

CVE-2012-6571

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

CVE-2013-4629

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method...

CVE-2013-4629

CVE-2013-4629 concerns Huawei VP9610/VP9620 video-conference hardware where the login session ID is not updated after authentication, enabling session hijacking by a remote, authenticated attacker. Reported impacts align with CVSS metrics: high impact on confidentiality, integrity, and availabili...

PT-2013-5108

Name of the Vulnerable Software and Affected Versions Huawei Video Conference system viewpoint VP9610 and VP9620 units affected versions not specified Description The issue allows remote authenticated users to hijack sessions due to the Session ID not being updated upon successful establishment o...

CVE-2012-6571: Undefined Security Weakness

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

CVE-2013-4629: Undefined Security Weakness

The Huawei viewpoint VP9610 and VP9620 units for the Huawei Video Conference system do not update the Session ID upon successful establishment of a login session, which allows remote authenticated users to hijack sessions via an unspecified interception method...

PT-2013-2025

Name of the Vulnerable Software and Affected Versions Huawei BIMS and web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches affected versions not specified Description The issue concerns the HTTP module in the affected systems, which...

PT-2013-4075

Name of the Vulnerable Software and Affected Versions IBM Data Studio versions 3.1.0 through 3.1.1 Description A cross-site request forgery issue in the Web Console allows remote attackers to hijack user authentication for requests accessing monitored database information. Recommendations For IBM...

Barracuda Backup - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Backup - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=783 BARRACUDA NETWORK SECURITY ID: BNSEC-881 Release Date: ============= 2013-06-14 Vulnerability Laboratory ID VL-ID:...