CVE Feed

    Dashboard / CVE / CVE-2007-2719

    CVE-2007-2719

    Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.

    Published:May 16, 2007
    Last Modified:Apr 23, 2026
    EPS:May 16, 2007
    EPSS Score:0.07452
    CVSS Score:10

    Affected Products

    Vendor
    Hp
    Product
    Systems Insight Manager

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2020-7200 (CVSS 9.8) — A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. The v…
    CVE-2012-1994 (CVSS 5.7) — HP Systems Insight Manager before 7.0 allows a remote user on adjacent network to access information…
    CVE-2016-8518 (CVSS 7.5) — A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found…
    CVE-2016-8517 (CVSS 6.1) — A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.…
    CVE-2016-8516 (CVSS 7.5) — A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found…
    CVE-2016-2029 (CVSS 9.1) — HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modif…
    CVE-2016-2021 (CVSS 8.1) — HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive informati…
    CVE-2016-2028 (CVSS 8.1) — HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive informatio…
    CVE-2016-2017 (CVSS 8.1) — HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive informati…
    CVE-2016-4357 (CVSS 8.1) — HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive informatio…

    References

    http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713
    http://osvdb.org/36061
    http://secunia.com/advisories/25275
    http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt
    http://www.securityfocus.com/archive/1/468974/100/0/threaded
    http://www.securityfocus.com/bid/23988
    http://www.securitytracker.com/id?1018062
    http://www.vupen.com/english/advisories/2007/1823
    https://exchange.xforce.ibmcloud.com/vulnerabilities/34303
    http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713
    http://osvdb.org/36061
    http://secunia.com/advisories/25275
    http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt
    http://www.securityfocus.com/archive/1/468974/100/0/threaded
    http://www.securityfocus.com/bid/23988
    http://www.securitytracker.com/id?1018062
    http://www.vupen.com/english/advisories/2007/1823
    https://exchange.xforce.ibmcloud.com/vulnerabilities/34303

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High