VULNERABILITY INTELLIGENCE
CVE-2001-0962
CVSS score7.5 NONE
EPSS probability1.59%
CISA KEVNot currently listed
Published2001-09-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other