CVE-2017-1270

Description

IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could force a user to utilize a cookie that may be known to an attacker. IBM X-Force ID: 124745.

Risk Information

Base Score

3.3

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.053

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Security Guardium 10.0	Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.1.2	Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.0.1	Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.1.0	Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.1.3	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234