high7.5
CVE-2015-6845
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access b…
Impact
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Sourceone Email Supervisor | through 7.1 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html
- http://seclists.org/bugtraq/2015/Oct/58
- http://www.securitytracker.com/id/1033787
- http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html
- http://seclists.org/bugtraq/2015/Oct/58
- http://www.securitytracker.com/id/1033787