Session Hijacking Vulnerability in VMware vCenter Server and vCloud Director
CVE-2016-2076

7.6HIGH

Key Information:

Vendor: Vmware
Status: Vcenter Server; Vcloud Director; Vcloud Automation Identity Appliance
Vendor: CVE Published:; 15 April 2016

What is CVE-2016-2076?

The Client Integration Plugin (CIP) in VMware vCenter Server, vCloud Director, and vRealize Automation Identity Appliance has a flaw that mishandles session content. This vulnerability allows an attacker to hijack a user's session by exploiting crafted web content, potentially leading to unauthorized access and exposure of sensitive information.