CVE-2014-0635: High severity EMC VPLEX GeoSynchrony vulnerability
Published Mar 28, 2014
·Updated
Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors.
Affected Software
5 affected components
EMC VPLEX GeoSynchrony=4.0
EMC VPLEX GeoSynchrony=5.0
EMC VPLEX GeoSynchrony=5.1
EMC VPLEX GeoSynchrony=5.2
EMC VPLEX GeoSynchrony=5.2.1
Event History
Mar 28, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Apr 1, 2014
Data Sourced
via NVD·06:28 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0635?
CVE-2014-0635 is considered a medium severity vulnerability due to its potential to allow session hijacking.
2
How do I fix CVE-2014-0635?
To fix CVE-2014-0635, upgrade EMC VPLEX GeoSynchrony to version 5.3 or later.
3
What systems are affected by CVE-2014-0635?
CVE-2014-0635 affects EMC VPLEX GeoSynchrony versions 4.x and 5.x prior to 5.3.
4
What type of vulnerability is CVE-2014-0635?
CVE-2014-0635 is a session fixation vulnerability.
5
Can CVE-2014-0635 be exploited remotely?
Yes, CVE-2014-0635 can be exploited remotely, allowing attackers to hijack web sessions.