CVE-2016-0910

—

CVSS 3.0

8.8 high

EPSS

<1%p24

Published

Jun 10, 2016 (Jun 10, 2016)

Modified

Jun 17, 2026

Description

EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors.

Vendors: emc
Products: data domain os
Weakness: CWE-264
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.