CVE-2009-5101

Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer…

published September 13, 2011

CVSS
—
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01135 · 66.2th percentile
Published
2011-09-13T19:00Z
EPSS history
Timeline
  • 13 SEP 19:00Z
    Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer…
    cvelistv5