cbcvebase.
CVE-2015-0201
published 2015-03-10

CVE-2015-0201: The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to…

medium5CVSS 3.1
AVNACLAuNCPINAN
The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.

Affected

6 ranges
VendorProductVersion rangeFixed in
debianlibspring-java——
pivotal_softwarespring_framework——
vmwarespring_framework——
vmwarespring_framework——
vmwarespring_framework——
vmwarespring_framework——