Session Hijacking Vulnerability in Rapid7 Nexpose before 5.5.4

CVE-2012-6494

Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain unauthorized access.

Learn more about our Api Penetration Testing.