Session Hijacking Vulnerability in Extreme Networks EXOS
CVE-2017-14332

8.1HIGH

Key Information:

Vendor

Extremenetworks

Status
Extremexos
Vendor
CVE Published:
23 October 2017

What is CVE-2017-14332?

The vulnerability in Extreme Networks EXOS allows remote attackers to hijack user sessions by determining SessionID values. This poses a significant threat to network security, as unauthorized access to active sessions can lead to data breaches and manipulation of network operations. Security measures should be implemented promptly to mitigate this risk.

References

https://extremeportal.force.com/ExtrArticleDetail?n=00001...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.