Security Advisory

CVE-2018-6959

9.8
CRITICAL

Vulnerability Description

VMware vRealize Automation (vRA) prior to 7.4.0 contains a vulnerability in the handling of session IDs. Exploitation of this issue may lead to the hijacking of a valid vRA user's session.
Published Date April 13, 2018
Official Source NIST NVD Advisory