NetSight
medium6.8

CVE-2013-5971

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and…

Impact

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.

Affected products

VendorProductAffected versions
VmwareVcenter Server
through 5.0
Versions 4.0.0.10021, 4.0.0.12305, 4.1, 4.1.0.12319, 4.1.0.14766

Weakness classification

References