VULNERABILITY INTELLIGENCE

CVE-2015-0201

CVSS score5 MEDIUM
EPSS probability1.90%
CISA KEVNot currently listed
Published2015-03-10
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.

Primary references