Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
EMC Secure Remote Services Virtual Edition (ESRS VE) 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EMC Secure Remote Services Virtual Edition 安全漏洞
Vulnerability Description
EMC Secure Remote Services Virtual Edition（ESRS VE）是美国易安信（EMC）公司的一套远程服务虚拟版软件。该软件用于在EMC客户服务和用户的EMC产品和解决方案之间提供远程连接。 ESRS VE 3.06之前3.x版本中存在安全漏洞，该漏洞源于程序没有正确生成会话cookie的随机数值。远程攻击者可通过预测该值利用该漏洞劫持会话。
CVSS Information
N/A
Vulnerability Type
N/A