medium6.8
CVE-2015-1893
The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensit…
Impact
The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Datapower Xc10 Appliance Firmware | Versions 2.1.0.0, 2.1.0.1, 2.1.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841
- http://www-01.ibm.com/support/docview.wss?uid=swg21701337
- http://www.securityfocus.com/bid/73916
- http://www.securitytracker.com/id/1032025
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841
- http://www-01.ibm.com/support/docview.wss?uid=swg21701337
- http://www.securityfocus.com/bid/73916
- http://www.securitytracker.com/id/1032025