Vulnerability in Ibm Websphere Datapower Xc10 Appliance Firmware

CVE-2015-1893

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.

EPSS: 0.017 (74.7th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_datapower_xc10_appliance_firmware — versions 2.1.0.0, 2.1.0.1, 2.1.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)