2000-10-13 04:00:00
mitre
PUBLISHED
Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession IDs via the SessionServlet servlet.