IBM Security Bulletin: WebSphere eXtreme Scale and WebSphere DataPower XC10 Appliance client vulnerability (CVE-2013-6734)
|
System information
|
| |
|
|
Affected software |
IBM |
Description
|
In certain configurations, a security vulnerability exists in WebSphere eXtreme Scale Client, the client that is used with WebSphere eXtreme Scale and WebSphere DataPower XC10 Appliance. WebSphere eXtreme Scale Client might allow cached HTTP session data of one user to be accessed by a different user when both users access the same web container. CVE(s): CVE-2013-6734 Affected product(s) and affected version(s): WebSphere eXtreme Scale V7.1.0 WebSphere eXtreme Scale V7.1.1 WebSphere
More info:
https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_websphere_extreme_scale_and_websphere_datapower_xc10_appliance_client_vulnerability_cve_2013_6734?lang=en_us |
Standar resources
|
|
Property |
Value |
|
CVE |
CVE-2013-6734 ,CVE-2014-0890 and CVE-2013-6731. |
