← Database

CVE-2009-5101

MEDIUM CVSS: 5.0 Published: 2011-09-13 Modified: 2026-06-16

Description

Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic.

Affected Platforms

Pentaho Bi Server

Weakness Type

CWE-200

References