CVE-2001-1286

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g

published May 3, 2002

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03495 · 89.0th percentile
Published
2002-05-03T04:00Z
EPSS history
Timeline
  • 03 MAY 04:00Z
    Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g
    cvelistv5