Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2001-1534

Date: October 3, 2022

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.

Severity Score

Related Resources (6)

http://www.securityfocus.com/bid/3521
https://security-tracker.debian.org/tracker/CVE-2001-1534
http://www.iss.net/security_center/static/7494.php
http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00084.html
https://nvd.nist.gov/vuln/detail/CVE-2001-1534
https://www.mend.io/vulnerability-database/CVE-2001-1534

Severity Score

Weakness Type (CWE)

Session Fixation

CWE-384

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us