CVE-2003-1312

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods.

Score
CVSS 2.0 4.3 Medium
Status
Modified - cve@mitre.org
Published
2003-12-31
Last modified
2024-08-08

References

 
 
© AVABIS GmbH privacypolicy about