CVE-2017-1270: Low severity IBM Security Guardium vulnerability
IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 124745.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1270?
CVE-2017-1270 is classified as a high severity vulnerability due to the risk of session fixation and hijacking.
How do I fix CVE-2017-1270?
To mitigate CVE-2017-1270, ensure that session variables are properly renewed after successful user authentication.
Which versions of IBM Security Guardium are affected by CVE-2017-1270?
CVE-2017-1270 affects IBM Security Guardium versions 10.0, 10.0.1, 10.1.0, 10.1.2, and 10.1.3.
What type of vulnerability is CVE-2017-1270?
CVE-2017-1270 is a session fixation/hijacking vulnerability that arises from the failure to renew session variables.
What are the potential consequences of CVE-2017-1270?
If exploited, CVE-2017-1270 could allow attackers to hijack user sessions, leading to unauthorized access to sensitive information.