CVE-2017-1693 in Integration Bus

Summary

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to highack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 11/30/2016
• Disclosure: 01/19/2018
• Moderation: VulDB entry created
• Entries: 1: VDB-112254
• CPE: ready
• CWE: CWE-613 (Confirmed)
• CVSS: 6.5
• EPSS: 0.00294
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-1693
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-1693
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-1693/