Unscored CVE-2007-2719 EUVD-2007-2711GHSA-fwpj-2768-6hfr

Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions b…

Published May 16, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.

References

23988 vdb-entry
ADV-2007-1823 vdb-entry
HPSBMA02213 vendor-advisory
36061 vdb-entry
20070518 ACROS Security: Session Fixation Vulnerability in HP SIM 5.0 mailing-list
http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt
1018062 vdb-entry
hp-sim-jsessionid-session-hijacking(34303) vdb-entry
25275 third-party-advisory