high7.6
CVE-2016-2076
Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appli…
Impact
Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Vcenter Server | through 6.0 Version 5.5 |
| Vmware | Vcloud Automation Identity Appliance | Version 6.2.4 |
| Vmware | Vcloud Director | Version 5.5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securitytracker.com/id/1035570
- http://www.securitytracker.com/id/1035571
- http://www.securitytracker.com/id/1035572
- http://www.vmware.com/security/advisories/VMSA-2016-0004.html
- http://www.securitytracker.com/id/1035570
- http://www.securitytracker.com/id/1035571
- http://www.securitytracker.com/id/1035572
- http://www.vmware.com/security/advisories/VMSA-2016-0004.html