CVE-2013-5971: Medium severity vmware vcenter vulnerability
Published Oct 21, 2013
·Updated
Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.
Affected Software
9 affected components
VMware vCenter Server<=5.0
VMware vCenter Server=4.0.0.10021
VMware vCenter Server=4.0.0.12305
VMware vCenter Server=4.1
VMware vCenter Server=4.1.0.12319
VMware vCenter Server=4.1.0.14766
VMware vCenter Server=4.1.0.17435
VMware vCenter Server=5.0
VMware vCenter Server=5.0-update_1
Event History
Oct 21, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5971?
CVE-2013-5971 is rated as a medium-severity vulnerability due to its impact on session hijacking.
2
How do I fix CVE-2013-5971?
To fix CVE-2013-5971, it is recommended to apply the latest updates released by VMware for vCenter Server.
3
What are the affected versions for CVE-2013-5971?
CVE-2013-5971 affects multiple versions including vCenter Server 4.0, 4.1, and 5.0 before Update 3.
4
What type of vulnerability is CVE-2013-5971?
CVE-2013-5971 is a session fixation vulnerability that allows attackers to hijack web sessions.
5
Can CVE-2013-5971 be exploited remotely?
Yes, CVE-2013-5971 can be exploited by remote attackers, making it crucial to secure affected systems.