← Database

CVE-2001-1545

MEDIUM CVSS: 5.0 Published: 2001-12-31 Modified: 2026-06-16

Description

Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.

Affected Platforms

Macromedia Jrun

Weakness Type

NVD-CWE-Other

References