Skip to content
OpenAdvisories
Unscored CVE-2018-6959 EUVD-2018-18703GHSA-rg5g-5cq4-g4m7

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lea…

Published Apr 13, 2018 · Updated Sep 16, 2024 · Assigned by vmware

Vendor: VMware Product: vRealize Automation

Description

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session.

Affected products

VendorProductAffectedFixed
VMware vRealize Automation prior to 7.4.0 —

References