CVE-2013-5971
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-5971
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
VMware vSphere Web Client Server 会话固定漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
VMware vCenter Server是美国威睿（VMware）公司的一套服务器和虚拟化管理软件。该软件提供了一个用于管理VMware vSphere环境的集中式平台，可自动实施和交付虚拟基础架构。 VMware vCenter Server 5.0:update_2_rc及之前的版本中的vSphere Web Client Server中存在会话固定漏洞。远程攻击者可利用该漏洞劫持Web会话，并获取提升的权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-5971
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-5971
请登录查看更多情报信息。
- 🔗 http://www.vmware.com/security/advisories/VMSA-2013-0012.htmlx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2013-5971
Same Patch Batch · n/a · 2013-10-21 · 5 CVEs total
| CVE-2012-4115 | Cisco UCS Fabric-Interconnect组件信息泄露漏洞 | |
| CVE-2013-5542 | Cisco ASA软件资源管理错误漏洞 | |
| CVE-2013-5970 | VMware ESXi和ESX hostd-vmdb服务输入验证漏洞 | |
| CVE-2013-4450 | Node.js HTTP服务器拒绝服务漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2013-5971
No comments yet