CVE-2007-2719 Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.
HighCVSS 10.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc systems insight manager | = 4.2 | No fix listed |
| HP Inc systems insight manager | = 5.0-sp4 | No fix listed |
| HP Inc systems insight manager | = 5.0-sp5 | No fix listed |
References
- HPSBMA02213 vendor-advisory
- 36061 vdb-entry
- 25275 third-party-advisory vendor-advisory
- www.acrossecurity.com patch
- 20070518 ACROS Security: Session Fixation Vulnerability in HP SIM 5.0 mailing-list
- 23988 vdb-entry
- 1018062 vdb-entry
- ADV-2007-1823 vdb-entry
- hp-sim-jsessionid-session-hijacking(34303) vdb-entry