Session fixation

2013-11-0220:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.5%

JSON

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors.

CPENameOperatorVersion
zenworks_configuration_managementeq11 sp1
zenworks_configuration_managementeq10.3.2
zenworks_configuration_managementeq10.3.1
zenworks_configuration_managementeq10.2
zenworks_configuration_managementeq11
zenworks_configuration_managementeq10.3
zenworks_configuration_managementeq10.3.3
zenworks_configuration_managementeq11.2
zenworks_configuration_managementle11.2.3

Name	Operator	Version
zenworks_configuration_management	eq	11 sp1
zenworks_configuration_management	eq	10.3.2
zenworks_configuration_management	eq	10.3.1
zenworks_configuration_management	eq	10.2
zenworks_configuration_management	eq	11
zenworks_configuration_management	eq	10.3
zenworks_configuration_management	eq	10.3.3
zenworks_configuration_management	eq	11.2
zenworks_configuration_management	le	11.2.3

References

www.novell.com/support/kb/doc.php?id=7012027