CVE-2001-1532

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-12-31 · updated 2026-06-16

Description

WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.

Affected products

Web Crossing Webx: all versions

References

http://www.iss.net/security_center/static/7458.php
http://www.securityfocus.com/archive/1/223799
http://www.iss.net/security_center/static/7458.php
http://www.securityfocus.com/archive/1/223799

Get alerted when CVE-2001-1532 or the next vulnerability affects your stack