CVE-2015-1893

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.

Score

CVSS 2.0 6.8 Medium

Status

Modified - psirt@us.ibm.com

Published

2015-04-06

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Websphere Datapower Xc10 Appliance Firmware (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841
• http://www-01.ibm.com/support/docview.wss?uid=swg21701337
• http://www.securityfocus.com/bid/73916
• http://www.securitytracker.com/id/1032025