Vulnerability in EMC Sourceone Email Supervisor
CVE-2015-6845
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.
EPSS: 0.035 (87.8th percentile) — read the EPSS interpretation.
Affected products
- Emc Sourceone_email_supervisor
- N/a — versions n/a
References
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ, Mailing List)
- security_alert@emc.com (Third Party Advisory, x_refsource_MISC)
- security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)