medium5.4
CVE-2014-2509
Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web…
Impact
Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Smarts Network Configuration Manager | through 9.2 Version 9.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0168.html
- http://packetstormsecurity.com/files/127301/EMC-Network-Configuration-Manager-NCM-Session-Fixation.html
- http://secunia.com/advisories/59423
- http://www.securityfocus.com/archive/1/533077/100/0/threaded
- http://www.securitytracker.com/id/1030494
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0168.html
- http://packetstormsecurity.com/files/127301/EMC-Network-Configuration-Manager-NCM-Session-Fixation.html
- http://secunia.com/advisories/59423
- http://www.securityfocus.com/archive/1/533077/100/0/threaded
- http://www.securitytracker.com/id/1030494