7.5
CVE-2001-0962
- EPSS 1.59%
- Veröffentlicht 19.09.2001 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:55:18
- Erkennungen
LoginIBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Application Server Version <= 3.5.3
Ibm ≫ Websphere Commerce Suite Version 3.1.2
Ibm ≫ Websphere Commerce Suite Version 3.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.59% | 0.724 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html
http://www.osvdb.org/5492
http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platform&v=3.0.2&e=Standard+%26+Advanced+Editions&cat=&s=p
https://exchange.xforce.ibmcloud.com/vulnerabilities/7153