CVE-2018-6959

State: Published
Severity: Not scored
Published: Apr 13, 2018
Updated: Sep 16, 2024
Reserved: Feb 14, 2018

Description

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
vRealize AutomationVMware	prior to 7.4.0Affected

References

103752vdb-entry
http://www.vmware.com/security/advisories/VMSA-2018-0009.html
1040676vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.