Vulnerability Details CVE-2013-5971
Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.9%
CVSS Severity
CVSS v2 Score 6.8
References
- http://osvdb.org/98718
- http://www.securityfocus.com/bid/63218
- http://www.vmware.com/security/advisories/VMSA-2013-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88134
- http://osvdb.org/98718
- http://www.securityfocus.com/bid/63218
- http://www.vmware.com/security/advisories/VMSA-2013-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88134
Products affected by CVE-2013-5971
-
cpe:2.3:a:vmware:vcenter_server:4.0.0.10021
-
cpe:2.3:a:vmware:vcenter_server:4.0.0.12305
-
cpe:2.3:a:vmware:vcenter_server:4.1
-
cpe:2.3:a:vmware:vcenter_server:4.1.0.12319
-
cpe:2.3:a:vmware:vcenter_server:4.1.0.14766
-
cpe:2.3:a:vmware:vcenter_server:4.1.0.17435
-
cpe:2.3:a:vmware:vcenter_server:5.0