CVE-2014-4815: Medium severity ibm rational lifecycle integration adapter for windchill vulnerability

Published Dec 12, 2014

Updated

Session fixation vulnerability in IBM Rational Lifecycle Integration Adapter for Windchill 1.x before 1.0.1 allows remote attackers to hijack web sessions via unspecified vectors.

Affected Software

1 affected component

IBM Rational Lifecycle Integration Adapter for Windchill=1.0.0

Event History

Dec 12, 2014

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

Which deployments are affected?

IBM Rational Lifecycle Integration Adapter for Windchill 1.x releases before 1.0.1 are affected.

Does exploitation require authentication or local access?

No. The supplied CVSS vector identifies network access and no authentication requirement, although exploitation has medium attack complexity.

What is the impact of successful exploitation?

A remote attacker may hijack a web session. The supplied impact metrics indicate an integrity impact, with no reported confidentiality or availability impact.

CVE-2014-4815: Medium severity ibm rational lifecycle integration adapter for windchill vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or local access?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or local access?

What is the impact of successful exploitation?