CVE-2010-3319

2010-09-1320:00:00

mitre

www.cve.org

ibm

records manager

vulnerability

session token

remote attackers

sensitive information

referer log file

AI Score

5.9

Confidence

Low

EPSS

0.003

Percentile

66.4%

JSON

IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sensitive information by reading a Referer log file.

References

www-01.ibm.com/support/docview.wss?uid=swg1PJ37426

www.securityfocus.com/bid/43136