CVE-2001-0962

No fix known EPSS 2%

IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.

Published 2002-06-25 · CVE record · OSV

Products: ibm websphere_application_server, ibm websphere_commerce_suite