CVE-2013-6347

2022-10-0316:14:50

CWE-287

[email protected]

web.nvd.nist.gov

cve-2013-6347

session fixation

vulnerability

novell zenworks

configuration management

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.5%

JSON

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors.

Affected configurations

NVD

Node

novellzenworks_configuration_managementRange≤11.2.3

novellzenworks_configuration_managementMatch10.2

novellzenworks_configuration_managementMatch10.3

novellzenworks_configuration_managementMatch10.3.1

novellzenworks_configuration_managementMatch10.3.2

novellzenworks_configuration_managementMatch10.3.3

novellzenworks_configuration_managementMatch11

novellzenworks_configuration_managementMatch11sp1

novellzenworks_configuration_managementMatch11.2

CPENameOperatorVersion
novell:zenworks_configuration_managementnovell zenworks configuration managementle11.2.3
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.2
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3.1
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3.2
novell:zenworks_configuration_managementnovell zenworks configuration managementeq10.3.3
novell:zenworks_configuration_managementnovell zenworks configuration managementeq11
novell:zenworks_configuration_managementnovell zenworks configuration managementeq11.2

CPE	Name	Operator	Version
novell:zenworks_configuration_management	novell zenworks configuration management	le	11.2.3
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.2
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3.1
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3.2
novell:zenworks_configuration_management	novell zenworks configuration management	eq	10.3.3
novell:zenworks_configuration_management	novell zenworks configuration management	eq	11
novell:zenworks_configuration_management	novell zenworks configuration management	eq	11.2