← back
CVE-2015-6845

CVE-2015-6845

EPSS 3.5%
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.htmlhttp://seclists.org/bugtraq/2015/Oct/58http://www.securitytracker.com/id/1033787