CVE-2013-6347

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Nov 2, 2013
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-63484.3Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML CVE-2013-63498.5McAfee Email Gateway (MEG) 7.0 before 7.0.4 and 7.5 before 7.5.1 allows remote authenticated users to execute arbitrary commands via unspeci CVE-2013-63576.8Cross-site request forgery (CSRF) vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows remote attackers to hi CVE-2013-63588.8PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the CVE-2013-63594.3Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugi CVE-2013-63607.5TRENDnet TS-S402 has a backdoor to enable TELNET.CVE-2013-63629.8Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.CVE-2013-63648.8Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book CVE-2013-63655.3Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions CVE-2013-63666.5The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getR CVE-2013-63675.7The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a CVE-2013-63686.2The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a