Lucene search

K
cvelistMitreCVELIST:CVE-2001-1545
HistoryJul 14, 2005 - 4:00 a.m.

CVE-2001-1545

2005-07-1404:00:00
mitre
www.cve.org
4
cve-2001-1545
macromedia jrun
url rewriting
remote attackers
session hijacking
http referrer
cookie

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

74.3%

Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

74.3%

Related for CVELIST:CVE-2001-1545