CVE-2016-2076

Name: CVE-2016-2076
Creator: NVD / NIST
Published: 2016-04-15T14:59:10.067+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.40%

Last modified Jun 17, 2026

CVE-2016-2076 is a vulnerability of currently unknown severity. Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site.. EPSS estimates a 1.40% chance of exploitation in the next 30 days.

Description

Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site.

Metrics

EPSS Probability

1.40%

69.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-287

Affected Software

Vendor	Product	Versions	Update
Vmware	Vcenter Server	<= 6.0	1b
Vmware	Vcenter Server	5.5	3a
Vmware	Vcloud Automation Identity Appliance	6.2.4	—
Vmware	Vcloud Director	5.5.5	—

References

http://www.securitytracker.com/id/1035570Third Party Advisory
http://www.securitytracker.com/id/1035571Third Party Advisory
http://www.securitytracker.com/id/1035572Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2016-0004.htmlVendor Advisory
http://www.securitytracker.com/id/1035570Third Party Advisory
http://www.securitytracker.com/id/1035571Third Party Advisory
http://www.securitytracker.com/id/1035572Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2016-0004.htmlVendor Advisory

Timeline

Published: Apr 15, 2016
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2016-2076?

How severe is CVE-2016-2076?

Severity scoring for CVE-2016-2076 is pending analysis. The EPSS model estimates a 1.40% probability of exploitation in the next 30 days.

How do I fix CVE-2016-2076?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-2076?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST