Vulnerability in Vmware Vcenter_server

CVE-2013-5971

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.

EPSS: 0.005 (66.6th percentile) — read the EPSS interpretation.

Affected products

Vmware Vcenter_server — versions 4.0.0.10021, 4.0.0.12305, 4.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

98718 (x_refsource_OSVDB, vdb-entry)
vmware-vcenter-cve20135971-session-hijacking(88134) (vdb-entry, x_refsource_XF)
63218 (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)