CVE-2015-6845 EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc sourceone email supervisor | <= 7.1 | No fix listed |
References
- packetstormsecurity.com third-party-advisory
- 20151011 ESA-2015-153 EMC SourceOne Email Supervisor Security Update for Multiple Security Vulnerabilities mailing-list
- 1033787 third-party-advisory vdb-entry