CVE-2018-6959

Publication date

2018-04-13 13:00:00

Family

vmware

State

PUBLISHED

Description

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA users session.