CVE Vulnerabilities

CVE-2010-2149

Improper Authentication

Published: Jun 03, 2010 | Modified: Sep 21, 2010
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Session fixation vulnerability in Fujitsu e-Pares V01 L01, L03, L10, L20, L30 allows remote attackers to hijack web sessions via unspecified vectors.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
E-pares Fujitsu l01 (including) l01 (including)
E-pares Fujitsu l03 (including) l03 (including)
E-pares Fujitsu l10 (including) l10 (including)
E-pares Fujitsu l20 (including) l20 (including)
E-pares Fujitsu l30 (including) l30 (including)
E-pares Fujitsu v01 (including) v01 (including)

Potential Mitigations

References