CVE-2013-5426

IBM InfoSphere <10.1.5, 11.0 - Session Fixation

Title source: llm

Description

Session fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 IF5 and 11.0 before IF1 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 IF11 allows remote authenticated users to hijack web sessions via unspecified vectors.

References (2)

[Vendor Advisory] http://www-01.ibm.com/support/docview.wss?uid=swg21660082

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/87535

Scores

EPSS 0.0012

EPSS Percentile 30.6%

Classification

CWE

CWE-287

Status draft

Affected Products (5)

ibm/infosphere_master_data_management_collaboration_server

ibm/infosphere_master_data_management_server_for_product_information_management

Timeline

Published Dec 19, 2013

Tracked Since Feb 18, 2026