PT-2015-5491 · Ibm · Ibm Websphere Datapower Xc10

Publicado 2015-04-06 · Atualizado 2016-08-04 · CVE-2015-1893

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 appliance version 2.1 before 2.1.0.3

Description The issue allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.

Recommendations For IBM WebSphere DataPower XC10 appliance version 2.1 before 2.1.0.3, update to version 2.1.0.3 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1893

Produtos afetados

Ibm Websphere Datapower Xc10

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-1893 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841 · Aviso do Fabricante
• http://securitytracker.com/id/1032025 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21701337 · Aviso do Fabricante
• http://securityfocus.com/bid/73916 · Nota