medium6.1
CVE-2012-6494
Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain unauthorized access.
Impact
Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain unauthorized access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rapid7 | Nexpose | before 5.5.4 |