CVE-2003-1312

CVE-2003-1312 describes a vulnerability in Netegrity SiteMinder's siteminderagent/SmMakeCookie.ccc component, where a session ID string is exposed within the SMSESSION parameter of a URL. This allows remote attackers to potentially obtain session IDs through sniffing, Referer logs, or similar methods. With a CVSS score of 4.3 (Medium), this vulnerability has a network attack vector and medium attack complexity, leading to a partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.