Lucene search
HistoryApr 11, 2000 - 4:00 a.m.
CVE-1999-0699
cve-1999-0699
nvd
bluestone sapphire
web server
session hijacking
security flaw
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.8%
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs.
Affected configurations
Node
bluestonesapphire_webMatch5.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| bluestone:sapphire_web | bluestone sapphire web | eq | 5.0 |
References
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.8%
Related for CVE-1999-0699