7.5
CVSSv2

CVE-2001-0962

Published: 19/09/2001 Updated: 10/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

IBM WebSphere Application Server 3.02 up to and including 3.53 uses predictable session IDs for cookies, which allows remote malicious users to gain privileges of WebSphere users via brute force guessing.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm websphere commerce suite 3.2

ibm websphere application server

ibm websphere commerce suite 3.1.2