CVE-2001-1534

ADVISORY - nist

Summary

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.

EPSS Score⁠: 0.0076 (0.557)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-384⁠

Session Fixation

Impacted images

Advisories

NIST

CREATED

25 years ago

UPDATED

7 months ago

ADVISORY IDCVE-2001-1534⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

2.1low

Debian

CREATED

25 years ago

UPDATED

2 months ago

ADVISORY IDCVE-2001-1534⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Red Hat

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY IDCVE-2001-1534⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY