CVE-2013-7408

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-10-26 · updated 2026-06-17
Weakness: CWE-310

Description

F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by guessing the value.

Affected products

F5 Big-Ip Analytics: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0

References

http://support.f5.com/kb/en-us/solutions/public/14000/300/sol14334.html
http://www.securityfocus.com/bid/68792
http://support.f5.com/kb/en-us/solutions/public/14000/300/sol14334.html
http://www.securityfocus.com/bid/68792

Get alerted when CVE-2013-7408 or the next vulnerability affects your stack