CVE-2003-1249

CVE-2003-1249 describes a session hijacking vulnerability in BusinessObjects WebIntelligence 2.7.1, where the application uses easily guessable user session cookies. This flaw allows remote attackers to compromise user sessions due to the lack of strong session token randomness. The vulnerability carries a CVSS score of 7.5, indicating high severity with network-based attacks, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.