Vulnerability in Ibm Integration Bus

CVE-2017-1693

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.

EPSS: 0.003 (53.1th percentile) — read the EPSS interpretation.

Affected products

Ibm Integration Bus — versions 9.0, 10.0

References

www.ibm.com/support/docview.wss (x_refsource_CONFIRM)
102760 (vdb-entry, x_refsource_BID)
exchange.xforce.ibmcloud.com/vulnerabilities/134164 (x_refsource_MISC)