CVE-2001-1284

Publication date

2002-05-03 04:00:00

Family

mitre

State

PUBLISHED

Description

Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.