CVE-2018-9026 A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom privileged access manager | >= 2.0.0, < 3.0.0 | 3.0.0 |
| ca technologies CA Privileged Access Manager | = 2.x | No fix listed |
References
- 104496 third-party-advisory vdb-entry
- support.ca.com vendor-advisory