CVE-2003-1249 WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| businessobjects webintelligence | = 2.7.1 | No fix listed |
References
- 20030109 WebIntelligence session hijacking vulnerability mailing-list patch vendor-advisory
- 7846 third-party-advisory
- webintelligence-session-hijacking(11026) vdb-entry
- 20030109 WebIntelligence session hijacking vulnerability mailing-list patch vendor-advisory
- 6569 patch vdb-entry
- 1005906 vdb-entry