CVE-2013-5971

Published: Oct 21, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.

Affected (9)

Products: Vmware: Vcenter Server

Vmware

1 product

Vcenter Server

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Vmware Vcenter Server	Up to 5.0
Vmware Vcenter Server	Version 4.0.0.10021
Vmware Vcenter Server	Version 4.0.0.12305
Vmware Vcenter Server	Version 4.1.0.12319
Vmware Vcenter Server	Version 4.1.0.14766
Vmware Vcenter Server	Version 4.1.0.17435
Vmware Vcenter Server	Version 4.1
Vmware Vcenter Server	Version 5.0
Vmware Vcenter Server	Version 5.0 update_1