CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-4529

The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.4%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2012-4529

Redhat » Jboss Community Application Server » Version: 4.2.0

cpe:2.3:a:redhat:jboss_community_application_server:4.2.0
Redhat » Jboss Community Application Server » Version: 4.3.0

cpe:2.3:a:redhat:jboss_community_application_server:4.3.0
Redhat » Jboss Community Application Server » Version: 5.0.0

cpe:2.3:a:redhat:jboss_community_application_server:5.0.0
Redhat » Jboss Community Application Server » Version: 5.0.1

cpe:2.3:a:redhat:jboss_community_application_server:5.0.1
Redhat » Jboss Community Application Server » Version: 5.1.0

cpe:2.3:a:redhat:jboss_community_application_server:5.1.0
Redhat » Jboss Community Application Server » Version: 5.1.1

cpe:2.3:a:redhat:jboss_community_application_server:5.1.1
Redhat » Jboss Community Application Server » Version: 5.1.2

cpe:2.3:a:redhat:jboss_community_application_server:5.1.2
Redhat » Jboss Community Application Server » Version: 5.2.0

cpe:2.3:a:redhat:jboss_community_application_server:5.2.0
Redhat » Jboss Community Application Server » Version: 6.0.0

cpe:2.3:a:redhat:jboss_community_application_server:6.0.0
Redhat » Jboss Community Application Server » Version: 6.1.0

cpe:2.3:a:redhat:jboss_community_application_server:6.1.0
Redhat » Jboss Community Application Server » Version: 7.0.0

cpe:2.3:a:redhat:jboss_community_application_server:7.0.0
Redhat » Jboss Community Application Server » Version: 7.0.1

cpe:2.3:a:redhat:jboss_community_application_server:7.0.1
Redhat » Jboss Community Application Server » Version: 7.0.2

cpe:2.3:a:redhat:jboss_community_application_server:7.0.2
Redhat » Jboss Community Application Server » Version: 7.1.0

cpe:2.3:a:redhat:jboss_community_application_server:7.1.0
Redhat » Jboss Community Application Server » Version: 7.1.1

cpe:2.3:a:redhat:jboss_community_application_server:7.1.1
Redhat » Jboss Enterprise Application Platform » Version: 6.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-4529

Products

Pricing

Contact Us