SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2012-0264

op5 Monitor and op5 Appliance before 5.5.0 do not properly manage session cookies, which allows remote attackers to have an unspecified impact via unspecified vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

http://seclists.org/fulldisclosure/2012/Jan/62

SECUNIA-47344

OSVDB-78066

http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf

http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/

https://bugs.op5.com/view.php?id=5094


30480



423868



251782



909



196543



282