CVE-2015-6845

EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.

Score

CVSS 2.0 7.5 High

Status

Modified - security_alert@emc.com

Published

2015-10-18

Last modified

2024-08-06

Affected products

• Sourceone Email Supervisor (Emc)

References

• http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html
• http://seclists.org/bugtraq/2015/Oct/58
• http://www.securitytracker.com/id/1033787