IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force ID: 120257
Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.
Link | Tags |
---|---|
http://www.securitytracker.com/id/1039073 | vdb entry third party advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/120257 | vdb entry vendor advisory |
http://www.ibm.com/support/docview.wss?uid=swg22006430 | patch vendor advisory |