PT-2015-4707 · Emc · Esrs Ve

Publicado 2015-07-05 · Atualizado 2016-12-28 · CVE-2015-0544

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC Secure Remote Services Virtual Edition (ESRS VE) versions 3.x before 3.06

Description The issue is related to the generation of random values for session cookies. Due to improper generation, it becomes easier for remote attackers to hijack sessions by predicting a value.

Recommendations For versions 3.x before 3.06, update to version 3.06 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2015-0544

Produtos afetados

Esrs Ve

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0544 · Nota de Segurança
• http://seclists.org/bugtraq/2015/Jun/132 · Nota
• http://securitytracker.com/id/1032740 · Nota