CVE-2015-6844

概要

参考情報

• packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html · Third Party Advisory
• seclists.org/bugtraq/2015/Oct/58 · Mailing List
• securitytracker.com/id/1033787 · Third Party Advisory

sourceone email supervisor のその他の脆弱性

• CVE-2015-6846中 6.8EMC SourceOne Email Supervisor before 7.2 uses hardcoded encryption keys, which makes it easier for attackers to obtain access by examining …
• CVE-2015-6845高 7.5EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers…
• CVE-2015-6843中 5.0Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote att…