CVE-2017-1693
19.01.2018, 14:29
IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | integration_bus | 9.0.0.0 |
| ibm | integration_bus | 9.0.0.1 |
| ibm | integration_bus | 9.0.0.2 |
| ibm | integration_bus | 9.0.0.3 |
| ibm | integration_bus | 9.0.0.4 |
| ibm | integration_bus | 9.0.0.5 |
| ibm | integration_bus | 9.0.0.6 |
| ibm | integration_bus | 9.0.0.7 |
| ibm | integration_bus | 9.0.0.8 |
| ibm | integration_bus | 10.0 |
| ibm | integration_bus | 10.0.0.0 |
| ibm | integration_bus | 10.0.0.1 |
| ibm | integration_bus | 10.0.0.2 |
| ibm | integration_bus | 10.0.0.3 |
| ibm | integration_bus | 10.0.0.4 |
| ibm | integration_bus | 10.0.0.5 |
| ibm | integration_bus | 10.0.0.6 |
| ibm | integration_bus | 10.0.0.7 |
| ibm | integration_bus | 10.0.0.8 |
| ibm | integration_bus | 10.0.0.9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References