CVE-2015-1893

Published: Apr 6, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.

Affected (3)

Products: Ibm: Websphere Datapower Xc10 Appliance Firmware

1 product

Websphere Datapower Xc10 Appliance Firmware

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Datapower Xc10 Appliance Firmware	Version 2.1.0.0
Ibm Websphere Datapower Xc10 Appliance Firmware	Version 2.1.0.1
Ibm Websphere Datapower Xc10 Appliance Firmware	Version 2.1.0.2

Related CWEs

References (8)

http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841

Source: psirt@us.ibm.com

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21701337

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/73916

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032025

Source: psirt@us.ibm.com

Third Party AdvisoryVDB Entry

http://www-01.ibm.com/support/docview.wss?uid=swg1IT07841

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21701337

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/73916

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1032025

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.