CVE-2016-2076

Published: Apr 15, 2016Modified: May 6, 2026

7.6

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Exploitability: 2.8 / Impact: 4.7

Source: NVD

Description

Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site.

Affected (6)

Products: Vmware: Vcenter Server, Vcloud Automation Identity Appliance, Vcloud Director

Vmware

3 products

Vcenter Server

Vcloud Automation Identity Appliance

Vcloud Director

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Vmware Vcenter Server	Up to 6.0
Vmware Vcenter Server	Version 5.5 3a
Vmware Vcenter Server	Version 5.5 3b
Vmware Vcenter Server	Version 5.5 u3c
Vmware Vcloud Automation Identity Appliance	Version 6.2.4
Vmware Vcloud Director	Version 5.5.5