CVE-2001-1513: High severity Macromedia JRun vulnerability
Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' (slash), as demonstrated using ctx.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1513?
CVE-2001-1513 is considered a high severity vulnerability due to its potential for user session hijacking.
How does CVE-2001-1513 allow session hijacking?
CVE-2001-1513 allows attackers to obtain duplicate active user session IDs through a specific URL request pattern.
What versions of Macromedia JRun are affected by CVE-2001-1513?
CVE-2001-1513 affects Macromedia JRun versions 3.0 and 3.1.
What mitigations can be applied for CVE-2001-1513?
To mitigate CVE-2001-1513, ensure that proper URL handling is implemented to enforce trailing slashes in web application directory requests.
Is there a patch available for CVE-2001-1513?
No official patch is available for CVE-2001-1513, but upgrading to a newer version of JRun is recommended.