Aller au contenu
Se connecter
Non notée

CVE-2017-1152 IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which…

Description

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.

Produits et versions touchés

Produit Versions touchées Corrigé en
Financial Transaction Manager 3.0 3.0.1 → 3.0.2.1 Pas de correctif indiqué

Autres CVE de Financial Transaction Manager

Les 2 CVE de Financial Transaction Manager →
CVE-2017-1160 IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting Non notée
Suivre cette CVE