NVD

Id
84758  
Name
CVE-2017-6617  
Description
A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected software does not assign a new session identifier to a user session when a user authenticates to the web-based GUI. An attacker could exploit this vulnerability by using a hijacked session identifier to connect to the software through the web-based GUI. A successful exploit could allow the attacker to hijack an authenticated user's browser session on the affected system. Cisco Bug IDs: CSCvd14583.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-05-07  
Published
2017-04-20  
Modified Date
2017-04-27  
Seq
2017-6617  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414171 84758 CVE-2017-5987 http://git.qemu-project.org/?p=qemu.git;a=commit;h=6e86d90352adf6cb08295255220295cf23c4286e  View
414172 84758 CVE-2017-5987 [oss-security] 20170214 CVE-2017-5987 Qemu: sd: infinite loop issue in multi block transfers  View
414173 84758 CVE-2017-5987 96263  View
414174 84758 CVE-2017-5987 https://bugzilla.redhat.com/show_bug.cgi?id=1421995  View
414175 84758 CVE-2017-5987 [qemu-devel] 20170213 Re: [Qemu-devel] [PATCH v3 1/4] sd: sdhci: check transfer mode register in multi block transfer  View
414176 84758 CVE-2017-5987 http://git.qemu-project.org/?p=qemu.git;a=commit;h=6e86d90352adf6cb08295255220295cf23c4286e  View
414177 84758 CVE-2017-5987 [oss-security] 20170214 CVE-2017-5987 Qemu: sd: infinite loop issue in multi block transfers  View
414178 84758 CVE-2017-5987 96263  View
414179 84758 CVE-2017-5987 https://bugzilla.redhat.com/show_bug.cgi?id=1421995  View
414180 84758 CVE-2017-5987 [qemu-devel] 20170213 Re: [Qemu-devel] [PATCH v3 1/4] sd: sdhci: check transfer mode register in multi block transfer  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67063 JVNDB-2017-003375 Cisco Integrated Management Controller の Web ベースの GUI における認証に関する脆弱性 Cisco Integrated Management Controller (IMC) の Web ベースの GUI には、認証に関する脆弱性が存在します。 CVE-2017-6617 0 CVE-2017-6617 84758 4.3 5.4 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003375.html 2017-04-19 2017-05-25 View