CVE-2001-1534
EPSS 0.28%
Description
mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.
How to fix CVE-2001-1534
No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.
- Debian/apache2—no fix listed
Is CVE-2001-1534 being exploited?
Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0