Lucene search
HistoryJul 05, 2015 - 10:59 a.m.
CVE-2015-0544
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
Low
EPSS
0.006
Percentile
78.0%
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value.
Affected configurations
Node
emcsecure_remote_servicesMatch3.02virtual
ORemcsecure_remote_servicesMatch3.03virtual
ORemcsecure_remote_servicesMatch3.04virtual
Related
securityvulns
securityvulns
Weak authentication in EMC Secure Remote Services Virtual Edition Web Portal
2015-08-24 00:00:00
ESA-2015-097: EMC Secure Remote Services (ESRS) Virtual Edition (VE) Multiple Security Vulnerabilities
2015-07-05 00:00:00
EMC Secure Remote Services Virtual Edition multiple security vulnerabilities
2015-08-24 00:00:00
cve
cve
CVE-2015-0544
2015-07-05 10:59:01
prion
prion
Design/Logic Flaw
2015-07-05 10:59:00
cvelist
cvelist
CVE-2015-0544
2015-07-05 10:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
6.6
Confidence
Low
EPSS
0.006
Percentile
78.0%
Related for NVD:CVE-2015-0544