CVE-2014-2509: Medium severity emc smarts network configuration manager vulnerability
Published Jul 1, 2014
·Updated
Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie.
Affected Software
2 affected components
EMC Smarts Network Configuration Manager<=9.2
EMC Smarts Network Configuration Manager=9.1
Event History
Jul 1, 2014
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-2509?
CVE-2014-2509 is rated as a medium severity vulnerability due to its potential impact on session hijacking.
2
How do I fix CVE-2014-2509?
To remediate CVE-2014-2509, upgrade EMC Network Configuration Manager to version 9.3 or later.
3
What type of vulnerability is CVE-2014-2509?
CVE-2014-2509 is a session fixation vulnerability that allows attackers to hijack user sessions.
4
Which versions of EMC Network Configuration Manager are affected by CVE-2014-2509?
CVE-2014-2509 affects EMC Network Configuration Manager versions prior to 9.3, including 9.1 and 9.2.
5
Can CVE-2014-2509 be exploited remotely?
Yes, CVE-2014-2509 can be exploited remotely by attackers through session cookies.