CVE-2017-1693

Published: Jan 19, 2018Modified: Nov 21, 2024

5.6

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.2 / Impact: 3.4

Source: NVD

Description

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.

Affected (20)

Products: Ibm: Integration Bus

Ibm

1 product

Integration Bus

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Ibm Integration Bus	Version 10.0.0.0
Ibm Integration Bus	Version 10.0.0.1
Ibm Integration Bus	Version 10.0.0.2
Ibm Integration Bus	Version 10.0.0.3
Ibm Integration Bus	Version 10.0.0.4
Ibm Integration Bus	Version 10.0.0.5
Ibm Integration Bus	Version 10.0.0.6
Ibm Integration Bus	Version 10.0.0.7
Ibm Integration Bus	Version 10.0.0.8
Ibm Integration Bus	Version 10.0.0.9
Ibm Integration Bus	Version 10.0
Ibm Integration Bus	Version 9.0.0.0
Ibm Integration Bus	Version 9.0.0.1
Ibm Integration Bus	Version 9.0.0.2
Ibm Integration Bus	Version 9.0.0.3
Ibm Integration Bus	Version 9.0.0.4
Ibm Integration Bus	Version 9.0.0.5
Ibm Integration Bus	Version 9.0.0.6
Ibm Integration Bus	Version 9.0.0.7
Ibm Integration Bus	Version 9.0.0.8