CVE-2007-2719

critical

Description

Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/34303

http://www.vupen.com/english/advisories/2007/1823

http://www.securitytracker.com/id?1018062

http://www.securityfocus.com/bid/23988

http://www.securityfocus.com/archive/1/468974/100/0/threaded

http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt

http://secunia.com/advisories/25275

http://osvdb.org/36061

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713

Details

Source: Mitre, NVD

Published: 2007-05-16

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N