CVE-2007-2719

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-05-16 · updated 2026-06-16
Weakness: CWE-287

Description

Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.

Affected products

Hewlett Packard Enterprise Systems Insight Manager using OpenSSL: 4.2, 5.0-sp4, 5.0-sp5

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713
http://osvdb.org/36061
http://secunia.com/advisories/25275
http://www.acrossecurity.com/aspr/ASPR-2007-05-14-1-PUB.txt
http://www.securityfocus.com/archive/1/468974/100/0/threaded
http://www.securityfocus.com/bid/23988
http://www.securitytracker.com/id?1018062
http://www.vupen.com/english/advisories/2007/1823
https://exchange.xforce.ibmcloud.com/vulnerabilities/34303
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01049713
http://osvdb.org/36061
http://secunia.com/advisories/25275

Get alerted when CVE-2007-2719 or the next vulnerability affects your stack