IBM Integration Bus CVE-2017-1693 Session Hijacking Vulnerability

Bugtraq ID:	102760
Class:	Design Error
CVE:	CVE-2017-1693
Remote:	Yes
Local:	No
Published:	Jan 17 2018 12:00AM
Updated:	Jan 17 2018 12:00AM
Credit:	IBM
Vulnerable:	IBM Integration Bus 9.0.0.8 IBM Integration Bus 9.0.0.0 IBM Integration Bus 10.0.0.9 IBM Integration Bus 10.0
Not Vulnerable:	IBM Integration Bus 10.0.10 IBM Integration Bus 9.0.0.9

IBM Integration Bus CVE-2017-1693 Session Hijacking Vulnerability

IBM Integration Bus is prone to a session-hijacking vulnerability.

An attacker can leverage this issue to gain unauthorized access to the affected application.

The following products are affected:

IBM Integration Bus 9.0.0.0 through 9.0.0.8
IBM Integration Bus 10.0.0.0 through 10.0.0.9

IBM Integration Bus CVE-2017-1693 Session Hijacking Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Integration Bus CVE-2017-1693 Session Hijacking Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Integration Bus CVE-2017-1693 Session Hijacking Vulnerability

References:

• IBM Homepage (IBM)
  
• swg22012642: IBM Integration Bus is affected by WebAdmin Session Timeout vulner (IBM)