CVE-2010-3319

IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sensitive information by reading a Referer log file.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-09-13

Last modified

2024-09-17

Weaknesses

CWE-255

Affected products

• Filenet Content Manager (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1PJ37426
• http://www.securityfocus.com/bid/43136