NetSight
IP …
medium5.0

CVE-2009-5101

Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer hea…

Impact

Pentaho BI Server 1.7.0.1062 and earlier includes the session ID (JSESSIONID) in the URL, which allows attackers to obtain it from session history, referer headers, or sniffing of web traffic.

Affected products

VendorProductAffected versions
PentahoBi Server
through 1.7.0.1062
Versions 1.2.0, 1.6.0

Weakness classification

CWE-200

References