CVE-2012-4529
published 2013-10-28CVE-2012-4529: The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the…
PriorityP420medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
1.98%
78.3th percentile
The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | jboss_community_application_server | <= 7.1.1 | — |
| redhat | jboss_community_application_server | — | — |
| redhat | jboss_community_application_server | — | — |
| redhat | jboss_community_application_server | — | — |
| redhat | jboss_community_application_server | — | — |
| redhat | jboss_community_application_server | — | — |
| redhat | jboss_community_application_server | — | — |
| redhat | jboss_community_application_server | — | — |
| redhat | jboss_community_application_server | — | — |
| redhat | jboss_community_application_server | — | — |
| redhat | jboss_enterprise_application_platform | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jfrq-h23h-p4q6: The org
ghsa_unreviewed·2022-05-17
CVE-2012-4529 [MEDIUM] GHSA-jfrq-h23h-p4q6: The org
The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.
Red Hat
Web: jsessionid exposed via encoded url when using cookie based session tracking
vendor_redhat·2012-10-10·CVSS 4.3
CVE-2012-4529 [MEDIUM] Web: jsessionid exposed via encoded url when using cookie based session tracking
Web: jsessionid exposed via encoded url when using cookie based session tracking
The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.
Package: tomcat5 (Red Hat Enterprise Linux 5) - Not affected
Package: tomcat6 (Red Hat Enterprise Linux 6) - Not affected
Package: jbossweb (Red Hat JBoss BRMS 5) - Not affected
Package: tomcat5 (Red Hat JBoss Enterprise Web Server 1) - Not affected
Package: tomcat6 (Red Hat JBoss Enterprise Web Server 1) - Not affected
Package: jbossweb (Red Hat JBoss Portal 5) - Not affected
Package
No detection rules found.
No public exploits indexed.
http://ocpsoft.org/support/topic/session-id-is-appended-as-url-path-parameter-in-very-first-request/http://rhn.redhat.com/errata/RHSA-2013-0833.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0834.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0839.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1437.htmlhttps://issues.jboss.org/browse/JBWEB-249http://ocpsoft.org/support/topic/session-id-is-appended-as-url-path-parameter-in-very-first-request/http://rhn.redhat.com/errata/RHSA-2013-0833.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0834.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0839.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1437.htmlhttps://issues.jboss.org/browse/JBWEB-249
2013-10-28
Published