CVE-2000-0539

Allaire JRun 2.3.x is affected by CVE-2000-0539 through information disclosure in servlet examples (SessionServlet), enabling remote attackers to obtain sensitive data such as HttpSession IDs. The OpenVAS entries corroborate that JRun sample files on affected systems expose sensitive information;...

CVE-2000-0539

Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet...