CVE-2018-9026: High severity Broadcom Privileged Access Manager vulnerability
Published Jun 18, 2018
·Updated
A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.
Affected Software
1 affected component
Broadcom Privileged Access Manager>=2.0.0<3.0.0
Event History
Jun 18, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Data Sourced
via NVD·06:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9026?
CVE-2018-9026 is classified as a high severity vulnerability due to its potential for session hijacking.
2
How do I fix CVE-2018-9026?
To fix CVE-2018-9026, update CA Privileged Access Manager to version 3.0.0 or later.
3
What type of vulnerability is CVE-2018-9026?
CVE-2018-9026 is a session fixation vulnerability that allows attackers to hijack user sessions.
4
Who is affected by CVE-2018-9026?
CVE-2018-9026 affects users of CA Privileged Access Manager version 2.x.
5
Can CVE-2018-9026 be exploited remotely?
Yes, CVE-2018-9026 can be exploited remotely by attackers through specially crafted requests.