CVEvulnerability

CVE-2015-0544

9.3 HIGH Published 2015-07-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-07-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value.

Affected configurations

• emc secure remote services 3.02 • emc secure remote services 3.03 • emc secure remote services 3.04

References