CVE-2009-5101

CVE-2009-5101 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic.

Learn more about our Web App Pen Testing.