NVD

Id
51476  
Name
CVE-2009-4353  
Description
The Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0911, does not remove the session ID in a Referer URL, which allows remote attackers to hijack web sessions via vectors such as an email with an embedded URL.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-17  
Modified Date
2009-12-21  
Seq
2009-4353  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261111 51476 CVE-2009-4353 JVN#85821104  View
261112 51476 CVE-2009-4353 JVNDB-2009-000076  View
261113 51476 CVE-2009-4353 http://www.transware.co.jp/support_am/security/vulnerability3.html  View
261114 51476 CVE-2009-4353 activemail2003-sessionid-info-disclosure(54751)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39990 JVNDB-2009-000076 Active! mail 2003 におけるセッション ID 漏えいの脆弱性 トランスウエアが提供する Active! mail 2003 には、セッション ID が漏えいする脆弱性が存在します。 CVE-2009-4353 41784 CVE-2009-4353 51476 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000076.html 2009-12-08 2009-12-08 View