Description (CNA)
IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM Corporation / Sterling Order Management | affected 8.5; affected 8.0; affected 9.1; affected 9.2; affected 9.2.1; affected 9.3; affected 9.4; affected 9.5 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.