Improper Authentication in VPLEX GeoSynchrony - CVE-2014-0635
Published: April 1, 2014 / Updated: August 10, 2020
Vulnerability identifier: #VU41869
CSH Severity: Medium
CVSS v4: 7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-0635
CWE-ID: CWE-287
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote #AU# to read, manipulate or delete data.
Session fixation vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote attackers to hijack web sessions via unspecified vectors.
Affected software
VPLEX GeoSynchrony
How to mitigate CVE-2014-0635
Install update from vendor's website.