CVEvulnerability
CVE-2015-0201
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-03-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-254
Description
The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.
Affected configurations
• pivotal software spring framework 4.1.0
• vmware spring framework 4.1.1
• vmware spring framework 4.1.2
• vmware spring framework 4.1.3
• vmware spring framework 4.1.4
Related
Weakness · not in database (1)
References
- https://pivotal.io/security/cve-2015-0201 Vendor Advisory
- https://pivotal.io/security/cve-2015-0201 Vendor Advisory