Zeacom Chat Server JSESSIONID Weak SessionID

0
50

Usage of weak session management exists within the Zeacom web-chat application versions 5.0 SP4 and below. It enables the bruteforcing of the sessionid which can enable the hijacking of anothers chat session.

Source: Zeacom Chat Server JSESSIONID Weak SessionID