CVE-2014-3909

Published: Sep 5, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Session fixation vulnerability in Falcon WisePoint 4.1.19.7 and earlier allows remote attackers to hijack web sessions via unspecified vectors.

Affected (21)

Products: Falconsc: Wisepoint

1 product

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Falconsc Wisepoint	version ≤ 4.1.19.7
Falconsc Wisepoint	Version 3.6.10
Falconsc Wisepoint	Version 3.6.11
Falconsc Wisepoint	Version 3.6.13
Falconsc Wisepoint	Version 3.6.15
Falconsc Wisepoint	Version 3.6.7
Falconsc Wisepoint	Version 3.6.8
Falconsc Wisepoint	Version 3.7.0
Falconsc Wisepoint	Version 3.7.1
Falconsc Wisepoint	Version 3.7.2
Falconsc Wisepoint	Version 3.7.3
Falconsc Wisepoint	Version 4.1.0
Falconsc Wisepoint	Version 4.1.10
Falconsc Wisepoint	Version 4.1.13
Falconsc Wisepoint	Version 4.1.17
Falconsc Wisepoint	Version 4.1.18
Falconsc Wisepoint	Version 4.1.19.1
Falconsc Wisepoint	Version 4.1.19.2
Falconsc Wisepoint	Version 4.1.19.4
Falconsc Wisepoint	Version 4.1.19.6
Falconsc Wisepoint	Version 4.1.19

References (6)

http://jvn.jp/en/jp/JVN49672671/index.html

Source: vultures@jpcert.or.jp

Patch

http://jvndb.jvn.jp/jvndb/JVNDB-2014-000084

Source: vultures@jpcert.or.jp

https://service.falconsc.com/service/product/patch/index.html

Source: vultures@jpcert.or.jp

Patch

http://jvn.jp/en/jp/JVN49672671/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://jvndb.jvn.jp/jvndb/JVNDB-2014-000084

Source: af854a3a-2127-422b-91ae-364da2661108

https://service.falconsc.com/service/product/patch/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.