Lucene search

IbmCVE-2015-2029

HistoryOct 04, 2015 - 2:59 a.m.

CVE-2015-2029

2015-10-0402:59:13

ibm

web.nvd.nist.gov

cve-2015-2029

ibm

websphere

extreme scale

vulnerability

session fixation

hijack

web sessions

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

62.0%

JSON

Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijack web sessions via a session identifier.

Affected configurations

Nvd

Node

ibmwebsphere_extreme_scaleMatch7.1.0

ibmwebsphere_extreme_scaleMatch7.1.0.2

ibmwebsphere_extreme_scaleMatch7.1.1

VendorProductVersionCPE
ibmwebsphere_extreme_scale7.1.0cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0:*:*:*:*:*:*:*
ibmwebsphere_extreme_scale7.1.0.2cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0.2:*:*:*:*:*:*:*
ibmwebsphere_extreme_scale7.1.1cpe:2.3:a:ibm:websphere_extreme_scale:7.1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_extreme_scale	7.1.0	cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0:::::::*
ibm	websphere_extreme_scale	7.1.0.2	cpe:2.3:a:ibm:websphere_extreme_scale:7.1.0.2:::::::*
ibm	websphere_extreme_scale	7.1.1	cpe:2.3:a:ibm:websphere_extreme_scale:7.1.1:::::::*

References

www-01.ibm.com/support/docview.wss?uid=swg1PI44098

www-01.ibm.com/support/docview.wss?uid=swg1PI44105

www-01.ibm.com/support/docview.wss?uid=swg21966044

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

62.0%

JSON

Related for CVE-2015-2029