CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. See the original NVD description below for full technical details.
CVE
CVE-2017-1152
Severity
MEDIUM
CVSS
4.3
EPSS
0.60%
Original NVD Description
IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293.
Related CVEs
Other vulnerabilities affecting the same vendor(s)