CVE-2013-5971
Published Oct 21, 2013
Last updated 7 years ago
Overview
- Description
- Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:*:update_2_rc:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C91183F-DC5E-4BDC-B6FB-A03BB3138D05",
"versionEndIncluding": "5.0"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:4.0.0.10021:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D80868B6-6384-4F64-95BB-21B09522C992"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:4.0.0.12305:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "119725A0-0CF0-4A7C-A25E-22F495B361E3"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6EAF333-0047-4B38-8EA0-E0D751DF681F"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:4.1.0.12319:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF498405-2A20-4EBD-AF2F-61442DEB3FB3"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:4.1.0.14766:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8899D39A-1F6F-458F-83CE-CBD0340E098A"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:4.1.0.17435:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE56BC41-C1F5-4746-96EB-DE6B4A43A7B2"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46C704E0-E165-4A44-A104-6C5B83A83237"
},
{
"criteria": "cpe:2.3:a:vmware:vcenter_server:5.0:update_1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DD9571C-CF1F-4EBA-AC8F-F0DF22106FDC"
}
],
"operator": "OR"
}
]
}
]