CVE-2018-15208

BPC SmartVista 2 has Session Fixation via the JSESSIONID parameter.

mitre·CWE-384·Published 2019-04-30

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

67 chars

BPC SmartVista 2 has Session Fixation via the JSESSIONID parameter.

NVDen

67 chars

BPC SmartVista 2 has Session Fixation via the JSESSIONID parameter.

NVDes

114 chars

BPC SmartVista versión 2, presenta una vulnerabilidad de tipo Session Fixation por medio del parámetro JSESSIONID.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P
3.0	Primary	NVD	7.5	1.6	5.9	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H