← Database

CVE-2007-2719

CRITICAL CVSS: 10.0 Published: 2007-05-16 Modified: 2026-06-16

Description

Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.

Affected Platforms

Hp Systems Insight Manager

Weakness Type

CWE-287

References