IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/62768 | vdb entry |
http://www.ibm.com/support/docview.wss?uid=swg21651343 | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/86598 | vdb entry |