Session Fixation Vulnerability in IBM WebSphere eXtreme Scale

CVE-2015-2029

Summary

A session fixation vulnerability exists in IBM WebSphere eXtreme Scale that allows remote attackers to hijack user sessions via a crafted session identifier. The affected versions are 7.1.0 prior to 7.1.0.3 and 7.1.1 prior to 7.1.1.1. This security flaw can be exploited by an attacker to gain unauthorized access to a user's session, potentially compromising sensitive data and user privacy.

References