CVE-2003-1312 | BDVDB-2026-20955 Detail

Description#

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://curl.haxx.se/mail/archive-2003-05/0172.html
http://www.osvdb.org/30741

Exploit#

No public exploit known

History#

Version 12006-12-15Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.