← Back

CVE-2014-0635

nvd nist
Published: Apr 1, 2014Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:M/Au:S/C:C/I:P/A:P
Exploitability: 6.8 / Impact: 8.5
Source: NVD

Description

Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors.

Affected (5)

Emc
1 product
Vplex Geosynchrony
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Emc
Vplex Geosynchrony
Version 4.0
Vplex Geosynchrony
Version 5.0
Vplex Geosynchrony
Version 5.1
Vplex Geosynchrony
Version 5.2.1
Vplex Geosynchrony
Version 5.2

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

Source: security_alert@emc.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.