CVE Daily

CVE-2013-6347

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM)...

Medium CVSS 6.8

Overview

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors.

CWE: CWE-287 Published: 2013-11-02T20:55:04.000
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.8 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags