cpe:/a:ca:privileged_access_manager:2.4.4.4 cpe:/a:ca:privileged_access_manager:2.7.0 cpe:/a:ca:privileged_access_manager:2.8.0 cpe:/a:ca:privileged_access_manager:2.8.1 cpe:/a:ca:privileged_access_manager:2.8.2 cpe:/a:ca:privileged_access_manager:2.8.3 cpe:/a:ca:privileged_access_manager:2.8.4.1 CVE-2018-9026 2018-06-18T14:29:00.540-04:00 2018-08-09T07:02:07.547-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2018-08-08T13:28:46.157-04:00 BID 104496 CONFIRM https://support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request.