CVEvulnerability
CVE-2007-2719
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-05-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.
Affected configurations
• hp systems insight manager 4.2
• hp systems insight manager 5.0
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713 h20000.www2.hp.com
- http://osvdb.org/36061 osvdb.org
- http://secunia.com/advisories/25275 Vendor Advisory
- http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt Patch
- http://www.securityfocus.com/archive/1/468974/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23988 www.securityfocus.com
- http://www.securitytracker.com/id?1018062 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1823 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34303 exchange.xforce.ibmcloud.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713 h20000.www2.hp.com
- http://osvdb.org/36061 osvdb.org
- http://secunia.com/advisories/25275 Vendor Advisory
- http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt Patch
- http://www.securityfocus.com/archive/1/468974/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23988 www.securityfocus.com
- http://www.securitytracker.com/id?1018062 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1823 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34303 exchange.xforce.ibmcloud.com