CVE-2010-3319

2022-10-0316:20:56

mitre

www.cve.org

ibm

records manager

vulnerability

session token

remote attackers

sensitive information

referer log file

5.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.6%

JSON

IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sensitive information by reading a Referer log file.

References

www-01.ibm.com/support/docview.wss?uid=swg1PJ37426

www.securityfocus.com/bid/43136