Security Advisory

CVE-2001-1513

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2005-07-14 04:00:00
Last updated 2024-08-08 04:58:11
Assigner mitre
State PUBLISHED

Description

Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing / (slash), as demonstrated using ctx.