PT-2001-2617 · Webx · Webx

Published 2001-12-31 · Updated 2008-09-05 · CVE-2001-1532

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebX (affected versions not specified)

Description The issue allows remote attackers to hijack user sessions due to the storage of authentication information in the HTTP REFERER variable, which is included in URL links within bulletin board messages posted by users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1532

Affected Products

Webx

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-1532 · Security Note
• http://securityfocus.com/archive/1/223799 · Note
• http://iss.net/security_center/static/7458.php · Note