CVE-2009-1629

ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for…

published May 14, 2009

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02325 · 83.4th percentile
Published
2009-05-14T17:00Z
EPSS history
Timeline
  • 14 MAY 17:00Z
    ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for…
    cvelistv5