CVE-2001-1545

Description

Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.

References

http://www.securityfocus.com/bid/3665

http://www.macromedia.com/v1/handlers/index.cfm?ID=22291&Method=Full

http://www.iss.net/security_center/static/7679.php

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS