Unscored CVE-2014-2509 EUVD-2014-2545GHSA-rq5m-vxrx-vvhp

Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote att…

Published Jul 1, 2014 · Updated Aug 6, 2024 · Assigned by dell

Description

Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie.

References

59423 third-party-advisory
http://packetstormsecurity.com/files/127301/EMC-Network-Configuration-Manager-NCM-Session-Fixation.html
1030494 vdb-entry
20140630 ESA-2014-055: EMC Network Configuration Manager (NCM) Session Fixation Vulnerability mailing-list
20140808 ESA-2014-055: EMC Network Configuration Manager (NCM) Report Advisor Session Fixation Vulnerability mailing-list