Session Impersonation Vulnerability in IBM Sterling Connect:Direct Web Services
IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0
does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ibm sterling connect direct web services 6.1.0.0 |
||
ibm sterling connect direct web services 6.2.0.0 |
||
ibm sterling connect direct web services 6.3.0.0 |
||
ibm sterling connect direct web services |