Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2001-1532

Опубликовано: 31 дек. 2001
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:web_crossing:webx:*:*:*:*:*:*:*:*

EPSS

Процентиль: 63%
0.00467
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
больше 3 лет назад

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.

EPSS

Процентиль: 63%
0.00467
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other