CVE-2001-0962

Published: Sep 19, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.

Affected (3)

Products: Ibm: Websphere Application Server, Websphere Commerce Suite

Ibm

2 products

Websphere Application Server

Websphere Commerce Suite

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Up to 3.5.3
Ibm Websphere Commerce Suite	Version 3.1.2
Ibm Websphere Commerce Suite	Version 3.2

References (8)

http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html

Source: cve@mitre.org

http://www.osvdb.org/5492

Source: cve@mitre.org

http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platform&v=3.0.2&e=Standard+%26+Advanced+Editions&cat=&s=p

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/7153

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/5492

Source: af854a3a-2127-422b-91ae-364da2661108

http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platform&v=3.0.2&e=Standard+%26+Advanced+Editions&cat=&s=p

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/7153

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.