Unscored severity · published May 16, 2007
CVE-2007-2719
Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie
–
CVSS
4.5%
EPSS
No
On KEV
Description
Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Systems Insight Manager · HP
4.2; 5.0; 5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2719
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2719
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713
osvdb.org
http://osvdb.org/36061
Vendor Advisory
http://secunia.com/advisories/25275
Patch
http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/468974/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/23988
More from Systems Insight Manager
9.8
CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
8.8
CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
9.8
CVE-2020-7200
A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6
9.8
CVE-2016-4366
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors
9.1
CVE-2016-2029
HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than…