CVE-2015-0201
published 2015-03-10CVE-2015-0201: The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to…
PriorityP427medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.90%
77.4th percentile
The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libspring-java | — | — |
| pivotal_software | spring_framework | — | — |
| vmware | spring_framework | — | — |
| vmware | spring_framework | — | — |
| vmware | spring_framework | — | — |
| vmware | spring_framework | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_debian5.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Moderate severity vulnerability that affects org.springframework:spring-core
osv·2018-10-17
CVE-2015-0201 [MEDIUM] Moderate severity vulnerability that affects org.springframework:spring-core
Moderate severity vulnerability that affects org.springframework:spring-core
The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.
GHSA
Moderate severity vulnerability that affects org.springframework:spring-core
ghsa·2018-10-17
CVE-2015-0201 [MEDIUM] Moderate severity vulnerability that affects org.springframework:spring-core
Moderate severity vulnerability that affects org.springframework:spring-core
The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.
Debian
CVE-2015-0201: libspring-java - The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates ...
vendor_debian·2015·CVSS 5.0
CVE-2015-0201 [MEDIUM] CVE-2015-0201: libspring-java - The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates ...
The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
2015-03-10
Published