6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.7%
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods.
curl.haxx.se/mail/archive-2003-05/0172.html
www.osvdb.org/30741