CVE-2015-1893
First published: Mon Apr 06 2015(Updated: )
The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Websphere Datapower Xc10 Appliance Firmware | =2.1.0.0 | |
| Ibm Websphere Datapower Xc10 Appliance Firmware | =2.1.0.1 | |
| Ibm Websphere Datapower Xc10 Appliance Firmware | =2.1.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/ibm
- canonical/ibm websphere datapower xc10 appliance firmware
- version/ibm websphere datapower xc10 appliance firmware/2.1.0.0
- version/ibm websphere datapower xc10 appliance firmware/2.1.0.1
- version/ibm websphere datapower xc10 appliance firmware/2.1.0.2