CVE-2017-1693

2018-01-1700:00:00

ibm

www.cve.org

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.2%

JSON

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.

CNA Affected

[
  {
    "product": "Integration Bus",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.0"
      },
      {
        "status": "affected",
        "version": "10.0"
      }
    ]
  }
]