CVE:CVE-2001-0962
CNNVD:CNNVD-200109-057
IBM WebSphere Application Server 3.02到3.53版本为了cookies使用可预期的访问Ids，远程攻击者可以借助无理性的强迫猜测提升WebSphere用户的权限。
solution:Upgrade ibm websphere_application_server to a higher version than 3.5.3,and avoid the version (,3.5.3]; Upgrade ibm websphere_commerce_suite to a higher version than 3.1.2,3.2,and avoid the version 3.1.2,3.2