Common Weakness Enumeration

CWE-6 J2EE Misconfiguration: Insufficient Session-ID Length

Description

The J2EE application is configured to use an insufficient session ID length.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-6 ordered by modification date.

1 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-mwcx-532g-8pq3 CVE-2018-12538 HIGH
maven/org.eclipse.jetty/jetty-server

Access and integrity issue within Eclipse Jetty

 2022-04-26