Security Advisory
CVE-2008-2318
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which allows remote attackers to obtain potentially sensitive information by reading the requests for these URLs.