CVE-2001-0962
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:websphere_application_server
- ibm:websphere_commerce_suite
References
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html
- http://www.osvdb.org/5492
- http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platform&v=3.0.2&e=Standard+%26+Advanced+Editions&cat=&s=p
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7153
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html