Security Bulletin: Multiple security vulnerabilities exist in IBM InfoSphere Information Server (CVE-2013-4066 and CVE-2013-4067)

Abstract Security Bulletin: Multiple security vulnerabilities exist in IBM InfoSphere Information Server CVE-2013-4066 and CVE-2013-4067 Content Security vulnerabilities exist in various versions of IBM Information Server or constituent products. See the individual descriptions for details...

CVE-2013-4067

IBM InfoSphere Information Server affected versions: 8.0, 8.1, 8.5 (FP3), 8.7, and 9.1. Affected component: Web Console/session handling leading to possible session hijack and cookie reading; attacker could also phish credentials. Root cause cited as insufficient safeguards around session/cookie ...