Vulnerability in Emc Eroom

CVE-2005-2185

eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks.

EPSS: 0.014 (69.0th percentile) — read the EPSS interpretation.

Affected products

  • Emc Eroom — versions 6.0, 6.0.1, 6.0.2
  • N/a — versions n/a

References