Lucene search
MitreCVE-2004-2182HistoryJul 10, 2005 - 4:00 a.m.
CVE-2004-2182
2005-07-1004:00:00
CWE-287
mitre
web.nvd.nist.gov
24
cve-2004-2182
session fixation
macromedia jrun 4.0
vulnerability
remote attackers
user sessions
session server
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.008
Percentile
82.2%
Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server.
Affected configurations
Node
macromediajrunMatch4.0
ORmacromediajrunMatch4.0sp1
ORmacromediajrunMatch4.0sp1a
ORmacromediajrunMatch4.0_build_61650
| Vendor | Product | Version | CPE |
|---|---|---|---|
| macromedia | jrun | 4.0 | cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:* |
| macromedia | jrun | 4.0 | cpe:2.3:a:macromedia:jrun:4.0:sp1:*:*:*:*:*:* |
| macromedia | jrun | 4.0 | cpe:2.3:a:macromedia:jrun:4.0:sp1a:*:*:*:*:*:* |
| macromedia | jrun | 4.0_build_61650 | cpe:2.3:a:macromedia:jrun:4.0_build_61650:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2004-2182
2005-07-10 04:00:00
nvd
nvd
CVE-2004-2182
2004-12-31 05:00:00
nessus
nessus
JRun Multiple Vulnerabilities (OF, XSS, ID, Hijacking)
2004-09-24 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.4
Confidence
Low
EPSS
0.008
Percentile
82.2%
Related for CVE-2004-2182