CVE-2012-6494

Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain unauthorized access.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2020-01-25

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Nexpose (Rapid7)

References

• http://www.securityfocus.com/bid/57150
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80982