CVE-2016-0910 | BDVDB-2026-76348 Detail

Description#

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/bugtraq/2016/Jun/44
http://www.securitytracker.com/id/1036074

Exploit#

No public exploit known

History#

Version 12016-06-10Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.