CVE-2007-2719

Published: May 16, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.

Affected (3)

Products: Hp: Systems Insight Manager

1 product

Systems Insight Manager

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Hp Systems Insight Manager	Version 4.2
Hp Systems Insight Manager	Version 5.0 sp4
Hp Systems Insight Manager	Version 5.0 sp5

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (18)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713

Source: cve@mitre.org

http://osvdb.org/36061

Source: cve@mitre.org

http://secunia.com/advisories/25275

Source: cve@mitre.org

Vendor Advisory

http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/468974/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23988

Source: cve@mitre.org

http://www.securitytracker.com/id?1018062

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1823

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34303

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713