NVD

Id
8719  
Name
CVE-2011-1839  
Description
IBM Rational Build Forge 7.1.0 uses the HTTP GET method during redirection from the authentication servlet to a PHP script, which makes it easier for context-dependent attackers to discover session IDs by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-04-28  
Modified Date
2011-05-02  
Seq
2011-1839  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50309 8719 CVE-2011-1839 PM29655  View
50310 8719 CVE-2011-1839 ADV-2011-0919  View
50311 8719 CVE-2011-1839 ibm-rational-servlet-info-disclosure(66714)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37822 JVNDB-2010-003607 IBM Rational Build Forge におけるセッション ID が漏えいする脆弱性 IBM Rational Build Forge は、PHP スクリプトに対する認証サーブレットからリダイレクトする間に HTTP GET メソッドを使用するため、セッション ID が漏えいする脆弱性が存在します。 CVE-2011-1839 49746 CVE-2011-1839 8719 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003607.html 2010-12-29 2012-03-27 View