Security Advisory

CVE-2018-6959

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-04-13 13:00:00
Last updated 2024-09-16 19:01:02
Assigner vmware
State PUBLISHED

Description

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA users session.