198 matches found
CVE-2015-2029
IBM WebSphere eXtreme Scale 7.1.0 (before 7.1.0.3) and 7.1.1 (before 7.1.1.1) expose a session fixation vulnerability that allows remote attackers to hijack a user’s web session by exploiting an existing session identifier. The issue stems from improper session management (failure to invalidate o...
CVE-2015-2028
CVE-2015-2028 is a CRLF injection vulnerability in IBM WebSphere eXtreme Scale, affecting WebSphere eXtreme Scale 7.1.0 up to but not including 7.1.0.3 and 7.1.1 up to but not including 7.1.1.1. A remote attacker can craft a URL to inject arbitrary HTTP headers and perform HTTP response splitting...
CVE-2015-2031
CVE-2015-2031 affects IBM WebSphere eXtreme Scale (V7.1.0 up to but not including 7.1.0.3 and V7.1.1 up to but not including 7.1.1.1). The issue is a cross-site scripting vulnerability caused by improper validation of user-supplied input, allowing remote authenticated users to inject arbitrary sc...
CVE-2015-2025
IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 do not set the secure flag on the session cookie in HTTPS, allowing interception of cookies in HTTP sessions. Affected versions: WebSphere eXtreme Scale 7.1.0 and 7.1.1. Remediation: apply fixes 7.1.0.3 (PI44105) or 7.1.1.1...
CVE-2015-2026
Cross-site request forgery CSRF vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2015-2026
CVE-2015-2026 affects IBM WebSphere eXtreme Scale 7.1.0 (before 7.1.0.3) and 7.1.1 (before 7.1.1.1). It is a CSRF vulnerability caused by improper validation of user-supplied input, enabling remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS se...
CVE-2015-2027
IBM WebSphere eXtreme Scale 7.1.0 (before 7.1.0.3) and 7.1.1 (before 7.1.1.1) is affected by a logout handling flaw that permits a local attacker to bypass access controls by leveraging an unattended workstation. The issue stems from improper logout actions within the eXtreme Scale component, ena...
CVE-2015-2030
CVE-2015-2030 affects IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1, where an improper account-lockout setting could allow a remote attacker to obtain access via brute-force attempts. The IBM security bulletin lists the vulnerable versions and provides fixed releases: ...
CVE-2015-2025
IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2015-2030
IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 has an improper account-lockout setting, which makes it easier for remote attackers to obtain access via a brute-force attack...
IBM WebSphere eXtreme Scale Information Disclosure Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale does not set a security flag for session cookies in SSL mode, allowing remote attackers to obtain cookie information by intercepting HTTP sessions...
IBM WebSphere eXtreme Scale Certificate Brute Force Breach Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale failed to properly set up user logout functionality, allowing remote attackers to exploit a vulnerability to brute-force account credentials...
IBM WebSphere eXtreme Scale Access Privilege Bypass Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale does not invalidate pre-existing session identifiers, allowing remote attackers to exploit the vulnerability to gain access to other users...
IBM WebSphere eXtreme Scale Cross-Site Request Forgery Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution. A cross-site request forgery vulnerability exists in IBM WebSphere Extreme Scale, which allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the context of the target use...
IBM WebSphere eXtreme Scale Answer Injection Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution. A security vulnerability in IBM WebSphere Extreme Scale allows a remote attacker to submit a specially crafted URL to insert a malicious response into a request waiting to be sent...
IBM WebSphere eXtreme Scale Security Bypass Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale failed to properly handle logout operations, allowing an attacker to exploit a vulnerability to bypass security restrictions on other user sessions...
IBM WebSphere eXtreme Scale Cross-Site Scripting Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution. A cross-site scripting vulnerability exists in IBM WebSphere Extreme Scale, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information ...
IBM WebSphere eXtreme Scale Denial of Service Vulnerability
IBM WebSphere eXtreme Scale is a distributed caching solution from IBM USA. The solution provides high-performance, scalable caching framework and grid technology to handle massive transactions, reduce database performance limitations and so on. A security vulnerability exists in IBM WebSphere...
