Description

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.

Remediation

References

CVE-2001-1534

Related Vulnerabilities

Oracle JRE CVE-2013-1563 Vulnerability (CVE-2013-1563)

Resin Application Server Other Vulnerability (CVE-2012-2966)

Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-46846)

Next.js User Interface (UI) Misrepresentation of Critical Information Vulnerability (CVE-2022-23646)

React Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-6341)

Severity

Low

Classification

CVE-2001-1534 CWE-384

Tags

Missing Update Known Vulnerabilities