← Database

CVE-2001-0962

HIGH CVSS: 7.5 Published: 2001-09-19 Modified: 2026-06-16

Description

IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.

Affected Platforms

Ibm Websphere Application ServerIbm Websphere Commerce Suite

Weakness Type

NVD-CWE-Other

References