CVE-2017-1152

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:financial_transaction_manager:3.0.1.0:*:*:*:*:ach_services:*:*
cpe:2.3:a:ibm:financial_transaction_manager:3.0.1.0:*:*:*:*:check_services:*:*
cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:ach_services:*:*
cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:check_services:*:*

History

No history.

Information

Published : 2017-04-14 16:59

Updated : 2024-02-04 19:11


NVD link : CVE-2017-1152

Mitre link : CVE-2017-1152

CVE.ORG link : CVE-2017-1152


JSON object : View

Products Affected

ibm

  • financial_transaction_manager
CWE
CWE-384

Session Fixation