Unscored severity · published Jun 3, 2010
CVE-2010-2149
Session fixation vulnerability in Fujitsu e-Pares V01 L01, L03, L10, L20, L30 allows remote attackers to hijack web sessions via unspecified vectors
–
CVSS
1.7%
EPSS
No
On KEV
Description
Session fixation vulnerability in Fujitsu e-Pares V01 L01, L03, L10, L20, L30 allows remote attackers to hijack web sessions via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
E-pares · Fujitsu
l01; l03; l10; l20; l30; v01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2149
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2149
jvn.jp
http://jvn.jp/en/jp/JVN36925871/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000023.html
Vendor Advisory
http://secunia.com/advisories/40029
Vendor Advisory
http://software.fujitsu.com/jp/security/vulnerabilities/jvn-36925871-58439007-82465391.html
www.securityfocus.com
http://www.securityfocus.com/bid/40513
More from E-pares
–
CVE-2010-2151
Cross-site request forgery (CSRF) vulnerability in Fujitsu e-Pares V01 L01 V01 L01, L03, L10, L20, L30, and L40 allows remote attackers to hijack the authentication of users for…
–
CVE-2010-2150
Cross-site scripting (XSS) vulnerability Fujitsu e-Pares V01 L01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors