Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM WebSphere DataPower XC10 权限许可和访问控制漏洞
Vulnerability Description
IBM WebSphere DataPower XC10是美国IBM公司的一套高速缓存平台。该平台可在对现有应用程序几乎不做任何更改的情况下对数据进行分布式高速缓存。 IBM WebSphere DataPower XC10平台2.1.0.0版本至2.1.0.2版本中存在安全漏洞。远程攻击者可利用该漏洞劫持任意用户的会话,获取敏感信息,或修改数据。
CVSS Information
N/A
Vulnerability Type
N/A