CVE-2015-2029

Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijack web sessions via a session identifier.

Score
CVSS 2.0 4.3 Medium
Status
Modified - psirt@us.ibm.com
Published
2015-10-04
Last modified
2024-08-06

Affected products

References