CVE-2001-1534: Apache HTTP Server

Low severity, CVSS 2.1. EPSS: 0.7% chance of exploitation in the next 30 days.

mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.

Affected products

• Apache HTTP Server: from 1.3.11, up to and including 1.3.20

Published 2001-12-31. Last modified 2026-06-16.