CVE-2015-0201

The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
pivotal_softwarespring_framework
4.1.0
vmwarespring_framework
4.1.1
vmwarespring_framework
4.1.2
vmwarespring_framework
4.1.3
vmwarespring_framework
4.1.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libspring-java
bookworm
4.3.30-2
fixed
bullseye
4.3.30-1
fixed
sid
4.3.30-2
fixed
trixie
4.3.30-2
fixed
Common Weakness Enumeration
References
https://pivotal.io/security/cve-2015-0201
https://pivotal.io/security/cve-2015-0201