Skip to content
Sign in
Not rated

CVE-2017-1152 IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which…

Description

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.

Affected products and versions

Product Affected versions Fixed in
Financial Transaction Manager 3.0 3.0.1 → 3.0.2.1 No fix stated

Other CVEs of Financial Transaction Manager

The 2 CVEs of Financial Transaction Manager →
CVE-2017-1160 IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting Not rated
Track this CVE