Session Fixation Vulnerability in Brightmail Control Center by Symantec
CVE-2012-0301

Currently unrated

Key Information:

Vendor
Symantec
Status
Message Filter
Vendor
CVE Published:
5 July 2012

Summary

A session fixation vulnerability exists in the Brightmail Control Center of Symantec Message Filter 6.3, which allows remote attackers to hijack user web sessions through certain exploit vectors. This flaw can compromise user authentication by enabling attackers to manipulate the session IDs, leading to unauthorized access and potential data breaches.

References

http://www.symantec.com/security_response/securityupdates...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/54135
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.