Security Advisory

CVE-2019-7280

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-07-01 18:31:34
Last updated 2024-08-04 20:46:46
Assigner mitre
State PUBLISHED

Description

Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication.