First published: Thu Jun 22 2000(Updated: )
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe JRun | =2.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2000-0539 is considered to be medium, as it allows exposure of sensitive information.
To fix CVE-2000-0539, upgrade to a version of Macromedia JRun higher than 2.3.
CVE-2000-0539 is a sensitivity information disclosure vulnerability.
CVE-2000-0539 specifically affects Allaire JRun version 2.3.
CVE-2000-0539 allows attackers to list HttpSession IDs, potentially leading to session hijacking.