Lucene search
HistorySep 13, 2011 - 7:59 p.m.
CVE-2009-5101
pentaho
bi server
session id
exposure
cve-2009-5101
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.1%
Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic.
Affected configurations
Node
pentahobi_serverRange≤1.7.0.1062
ORpentahobi_serverMatch1.2.0
ORpentahobi_serverMatch1.6.0
Related
nvd
nvd
CVE-2009-5101
2011-09-13 19:59:26
cvelist
cvelist
CVE-2009-5101
2011-09-13 19:00:00
prion
prion
Session fixation
2011-09-13 19:59:00
openvas
openvas
Pentaho BI Server Multiple Vulnerabilities
2011-09-22 00:00:00
Pentaho BI Server Multiple Vulnerabilities
2011-09-22 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.1%
Related for CVE-2009-5101