Описание
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.
Комментарий
Ссылки
- Third Party Advisory
- Mailing List
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Mailing List
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 7.1 (включая)
cpe:2.3:a:emc:sourceone_email_supervisor:*:*:*:*:*:*:*:*
EPSS
Процентиль: 81%
0.01493
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.
EPSS
Процентиль: 81%
0.01493
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other