Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-09-16T16:59:01.175Z
Reserved: 2005-07-14T00:00:00Z
Link: CVE-2001-1545

No data.

Status : Modified
Published: 2001-12-31T05:00:00.000
Modified: 2024-11-20T23:37:56.577
Link: CVE-2001-1545

No data.