NetSight
medium5.0

CVE-2010-3319

IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sensitive information b…

Impact

IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sensitive information by reading a Referer log file.

Affected products

VendorProductAffected versions
IbmFilenet Content Manager
Versions 4.5.0, 4.5.1

Weakness classification

References