VYPR
← All advisories
High severity7.6NVD Advisory· Published Apr 15, 2016· Updated Jun 17, 2026

CVE-2016-2076

CVE-2016-2076

Description

Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • VMware/Vcenter Serverllm-fuzzy5 versions
    5.5 U3a, U3b, U3c; 6.0 before U2+ 4 more
    • (no CPE)range: 5.5 U3a, U3b, U3c; 6.0 before U2
    • cpe:2.3:a:vmware:vcenter_server:*:1b:*:*:*:*:*:*range: <=6.0
    • cpe:2.3:a:vmware:vcenter_server:5.5:3a:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:5.5:3b:*:*:*:*:*:*
    • cpe:2.3:a:vmware:vcenter_server:5.5:u3c:*:*:*:*:*:*
  • VMware/Vcloud Directorllm-fuzzy2 versions
    5.5.5+ 1 more
    • (no CPE)range: 5.5.5
    • cpe:2.3:a:vmware:vcloud_director:5.5.5:*:*:*:*:*:*:*
  • VMware/vRealize Automation Identity Appliancellm-create2 versions
    6.2.4 before 6.2.4.1+ 1 more
    • (no CPE)range: 6.2.4 before 6.2.4.1
    • cpe:2.3:a:vmware:vcloud_automation_identity_appliance:6.2.4:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.