Lucene search
HistoryDec 08, 2009 - 5:30 p.m.
CVE-2009-2749
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
32.7%
Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.
Affected configurations
Node
ibmwebsphere_application_serverMatch7.0.0.7
ibmcommunications_enabled_applicationsRange≤1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_application_server | 7.0.0.7 | cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:* |
| ibm | communications_enabled_applications | * | cpe:2.3:a:ibm:communications_enabled_applications:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2009-12-08 17:30:00
cvelist
cvelist
CVE-2009-2749
2009-12-08 17:00:00
cve
cve
CVE-2009-2749
2009-12-08 17:30:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
32.7%
Related for NVD:CVE-2009-2749