CVE-2013-7408

Published: Oct 26, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value.

Affected (5)

Products: F5: Big Ip Analytics

1 product

Big Ip Analytics

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Analytics	Version 11.0.0
F5 Big Ip Analytics	Version 11.1.0
F5 Big Ip Analytics	Version 11.2.0
F5 Big Ip Analytics	Version 11.2.1
F5 Big Ip Analytics	Version 11.3.0

Related CWEs

CWE-310

References (4)

http://support.f5.com/kb/en-us/solutions/public/14000/300/sol14334.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/68792

Source: cve@mitre.org

http://support.f5.com/kb/en-us/solutions/public/14000/300/sol14334.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/bid/68792

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.