CVE-2001-1545
published 2001-12-31CVE-2001-1545: Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers…
PriorityP414medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.37%
68.6th percentile
Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| macromedia | jrun | — | — |
| macromedia | jrun | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.iss.net/security_center/static/7679.phphttp://www.macromedia.com/v1/handlers/index.cfm?ID=22291&Method=Fullhttp://www.securityfocus.com/bid/3665http://www.iss.net/security_center/static/7679.phphttp://www.macromedia.com/v1/handlers/index.cfm?ID=22291&Method=Fullhttp://www.securityfocus.com/bid/3665
2001-12-31
Published