← CVE Intelligence

CVE-2017-1152

IBM Corporation / Financial Transaction Manager PUBLISHED

Description (CNA)

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.

Affected (CNA)

Vendor / productVersions
IBM Corporation / Financial Transaction Manageraffected 3.0.1; affected 3.0.1.0; affected 3.0.2; affected 3.0.2.0; affected 3.0.2.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.