CVE-2001-1545

Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a

published July 14, 2005

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01373 · 71.6th percentile
Published
2005-07-14T04:00Z
EPSS history
Timeline
  • 14 JUL 04:00Z
    Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a
    cvelistv5