Auth bypass in EMC Vplex Geosynchrony

CVE-2014-0635

Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors.

Vulnerability class: Broken Authentication

EPSS: 0.012 (65.9th percentile) — read the EPSS interpretation.

Affected products

Emc Vplex_geosynchrony — versions 4.0, 5.0, 5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)