CVEvulnerability
CVE-2015-1893
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.
Affected configurations
• ibm websphere datapower xc10 appliance firmware 2.1.0.0
• ibm websphere datapower xc10 appliance firmware 2.1.0.1
• ibm websphere datapower xc10 appliance firmware 2.1.0.2
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21701337 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/73916 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032025 Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21701337 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/73916 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032025 Third Party Advisory, VDB Entry