Security Advisory

CVE-2009-2749

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-12-08 17:00:00

Last updated 2024-08-07 05:59:57

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.

← Browse all CVEs View on cve.org ↗