Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2015-0201

The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.

PublishedMar 10, 2015, 14:59

Published Bysecalert@redhat.com

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.springframework:spring-core(Maven)4.1.04.1.5N/A

References

https://pivotal.io/security/cve-2015-0201

Weakness Type

CWE-254

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:N/C:P/I:N/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)