Skip to content
fr Sign in
Not rated

CVE-2018-6959 VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs

Description

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session.

Affected products and versions

Product Affected versions Fixed in
vRealize Automation Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of vRealize Automation

The 3 CVEs of vRealize Automation →
CVE-2018-6958 VMware vRealize Automation (vRA) prior to 7.3.1 contains a vulnerability that may allow for a DOM-based cross-site… Not rated CVE-2017-4947 VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization… Not rated
Track this CVE