PT-2019-9096 · Bpc · Bpc Smartvista

Hai Dang Long + 2 · Publicado 2019-04-30 · Atualizado 2019-05-01 · CVE-2018-15208

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BPC SmartVista version 2

Description The issue concerns a session fixation problem via the JSESSIONID parameter.

Recommendations For version 2, consider restricting access to the JSESSIONID parameter to minimize the risk of exploitation.

Exploit

Correção

Session Fixation

Enumeração de Fraquezas

CWE-384

Identificadores relacionados

CVE-2018-15208

Produtos afetados

Bpc Smartvista

Referências · 3

• 🔥 https://neetech18.blogspot.com/2019/03/session-fixation-smart-vista-svfe-2.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-15208 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15208 · Nota de Segurança