Vulnerability Details CVE-2000-0539
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.6%
CVSS Severity
CVSS v2 Score 6.4
References
- http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full
- http://www.osvdb.org/818
- http://www.securityfocus.com/bid/1386
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4774
- http://www.allaire.com/handlers/index.cfm?ID=16290&Method=Full
- http://www.osvdb.org/818
- http://www.securityfocus.com/bid/1386
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4774
Products affected by CVE-2000-0539
-
cpe:2.3:a:macromedia:jrun:2.3