Unrated severityNVD Advisory· Published Jul 1, 2014· Updated May 6, 2026

CVE-2014-2509

Description

Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie.

Affected products

EMC Corporation/Smarts Network Configuration Manager2 versions
cpe:2.3:a:emc:smarts_network_configuration_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:emc:smarts_network_configuration_manager:*:*:*:*:*:*:*:*range: <=9.2
- cpe:2.3:a:emc:smarts_network_configuration_manager:9.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

archives.neohapsis.com/archives/bugtraq/2014-06/0168.htmlnvd
packetstormsecurity.com/files/127301/EMC-Network-Configuration-Manager-NCM-Session-Fixation.htmlnvd
secunia.com/advisories/59423nvd
www.securityfocus.com/archive/1/533077/100/0/threadednvd
www.securitytracker.com/id/1030494nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000