EMC VPLEX CVE-2014-0635 Unspecified Session Fixation Vulnerability
BID:66514
Info
EMC VPLEX CVE-2014-0635 Unspecified Session Fixation Vulnerability
| Bugtraq ID: | 66514 |
| Class: | Unknown |
| CVE: |
CVE-2014-0635 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 28 2014 12:00AM |
| Updated: | Mar 28 2014 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
EMC VPLEX CVE-2014-0635 Unspecified Session Fixation Vulnerability
EMC VPLEX is prone to an unspecified session-fixation vulnerability.
An attacker can exploit this issue to hijack an arbitrary session and gain unauthorized access to the affected application.
VPLEX GeoSynchrony 4.0 through 5.2.1 versions are vulnerable.
EMC VPLEX is prone to an unspecified session-fixation vulnerability.
An attacker can exploit this issue to hijack an arbitrary session and gain unauthorized access to the affected application.
VPLEX GeoSynchrony 4.0 through 5.2.1 versions are vulnerable.
Exploit / POC
EMC VPLEX CVE-2014-0635 Unspecified Session Fixation Vulnerability
To exploit this issue an attacker entices an unsuspecting user into following a malicious URI.
To exploit this issue an attacker entices an unsuspecting user into following a malicious URI.
Solution / Fix
EMC VPLEX CVE-2014-0635 Unspecified Session Fixation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
EMC VPLEX CVE-2014-0635 Unspecified Session Fixation Vulnerability
References:
References: