Vulnerabilities > CVE-2017-1693 - Insufficient Session Expiration vulnerability in IBM Integration BUS

CVSS 5.6 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

LOW

network

high complexity

ibm

CWE-613

NVD

Published: 2018-01-19

Updated: 2024-11-21

Summary

IBM Integration Bus 9.0 and 10.0 could allow an attacker that has captured a valid session id to hijack another users session during a small timeframe before the session times out. IBM X-Force ID: 134164.

Vulnerable Configurations

Part	Description	Count
Application	Ibm IBM Integration BUS 9.0.0.5 IBM Integration BUS 10.0.0.4 IBM Integration BUS 9.0.0.7 IBM Integration BUS 10.0.0.3 IBM Integration BUS 10.0 IBM Integration BUS 10.0.0.6 IBM Integration BUS 9.0.0.2 IBM Integration BUS 9.0.0.1 IBM Integration BUS 10.0.0.2 IBM Integration BUS 10.0.0.5 IBM Integration BUS 10.0.0.7 IBM Integration BUS 9.0.0.4 IBM Integration BUS 9.0.0.6 IBM Integration BUS 9.0.0.3 IBM Integration BUS 10.0.0.1 IBM Integration BUS 9.0.0.8 IBM Integration BUS 10.0.0.0 IBM Integration BUS 10.0.0.8 IBM Integration BUS 10.0.0.9 IBM Integration BUS 9.0.0.0	20

Common Weakness Enumeration (CWE)

CWE-613 - Insufficient Session Expiration

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References