CVE-2012-4529
MEDIUM severity · CVSS 4.3
4.3CVSS MEDIUM
Summary
The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id (1) via a man-in-the-middle attack or (2) by reading a log.
Impact & exploitability
Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impact—
Integrity impactNone
Availability impactNone
Exploit probability (EPSS)2%
AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://rhn.redhat.com/errata/RHSA-2013-0833.htmlAdvisory
- http://rhn.redhat.com/errata/RHSA-2013-0839.htmlAdvisory
- http://rhn.redhat.com/errata/RHSA-2013-1437.htmlAdvisory
- http://ocpsoft.org/support/topic/session-id-is-appended-as-url-path-parameter-in-very-first-request/
- http://rhn.redhat.com/errata/RHSA-2013-0834.html
- https://issues.jboss.org/browse/JBWEB-249