IBM InfoSphere Information Server CVE-2013-0507 Session Fixation Vulnerability

Bugtraq ID:	59815
Class:	Unknown
CVE:	CVE-2013-0507
Remote:	Yes
Local:	No
Published:	May 10 2013 12:00AM
Updated:	May 10 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	IBM IBM InfoSphere Information Server 9.1 IBM IBM InfoSphere Information Server 8.7 IBM IBM InfoSphere Information Server 8.5 IBM IBM InfoSphere Information Server 8.1
Not Vulnerable:

IBM InfoSphere Information Server CVE-2013-0507 Session Fixation Vulnerability

IBM InfoSphere Information Server is prone to a session-fixation vulnerability.

An attacker can exploit this issue to hijack an arbitrary session and gain unauthorized access to the affected application.

The following versions are vulnerable:

IBM InfoSphere Information Server 8.1
IBM InfoSphere Information Server 8.5
IBM InfoSphere Information Server 8.7
IBM InfoSphere Information Server 9.1

IBM InfoSphere Information Server CVE-2013-0507 Session Fixation Vulnerability

To exploit this issue an attacker entices an unsuspecting user into following a malicious URI.

IBM InfoSphere Information Server CVE-2013-0507 Session Fixation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.