CVE-2018-9026

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.

Score

CVSS 3.0 7.5 High

Status

Modified - vuln@ca.com

Published

2018-06-18

Last modified

2024-09-16

Weaknesses

CWE-384

Affected products

• Privileged Access Manager (Broadcom)
• Ca Privileged Access Manager (Ca Technologies)

References

• http://www.securityfocus.com/bid/104496
• https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-pr…