CVE-2015-6845
emc sourceone email supervisor: no CVSS score yet. EPSS 3.5% chance of exploitation in the next 30 days.
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.
- EPSS
- 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- emc:sourceone_email_supervisor
References
- http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html
- http://seclists.org/bugtraq/2015/Oct/58
- http://www.securitytracker.com/id/1033787
- http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html
- http://seclists.org/bugtraq/2015/Oct/58