CVE-2009-2749

Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which…

published December 8, 2009

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01150 · 66.6th percentile
Published
2009-12-08T17:00Z
EPSS history
Timeline
  • 08 DEC 17:00Z
    Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which…
    cvelistv5