Vulnerability in Emc Smarts Network Configuration Manager

CVE-2014-2509

Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie.

EPSS: 0.016 (73.0th percentile) — read the EPSS interpretation.

Affected products

Emc Smarts_network_configuration_manager — versions 9.1
N/a — versions n/a

References

security_alert@emc.com (x_refsource_SECUNIA, third-party-advisory)
security_alert@emc.com (x_refsource_MISC)
security_alert@emc.com (vdb-entry, x_refsource_SECTRACK)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)